No new version for more than 90 days, so OpenNavo has paused recommending and installing it. Homebrew still offers this app.

Mac Monitor Release Notes

A macOS GUI tool for examining Endpoint Security events during security research, malware triage, and system troubleshooting.

CaskSecurity & PrivacyAuto-updatesApple silicon · IntelPaused by OpenNavo
From homebrew/cask
30-day installs
39
1-year installs
690
Last 365 days
Latest version
2.1.0
Nov 22, 2025 · Nov 22, 2025
Download size
12MB
arm64 / x86_64 · pkg
Release cadence
Every 2 weeks
0 releases in 30 days
  1. 2.1.0

    Latest

    OpenNavo editorial Added to Homebrew

    CompatibilitymacOS 13 or later

    Adds optional event subscriptions, script-content collection for supported execution paths, and updates to event batching and the default mute set.

    Events
    Adds optional subscriptions for MPROTECT, LISTEXTATTR, and GETEXTATTR.Decodes MPROTECT protections; encodes the page address as hex.Converts MPROTECT protection size to kb; 50 ES events total.
    Scripts
    Collects script content for #! execution and supported interpreters.
    Experience
    Flushes event batches slightly faster and expands the default mute set.
  2. 2.0.0

    OpenNavo editorial Added to Homebrew

    CompatibilityUnknown

    Adds socket and file metadata events, bringing support to 47 event types, plus process filtering, ESLogger-standardized event output, and expanded path-muting tools.

    Events
    Adds UIPC_CONNECT, UIPC_BIND, SETMODE, and PTY_GRANT.Updates several event types with macOS 26 Tahoe properties.Standardizes nearly all events to ESLogger; Open Directory is excepted.
    Analysis
    Filter correlated events by process or process tree.Search the event mask and muted paths.Export Apple’s default mute set.
    Usability
    Save all or selected events as JSONL with ⌘-s or ⌘-shift-s.Refactors event metadata layouts and grouping controls.Sorts the event mask and muted paths.
  3. 1.9.1

    Patch

    OpenNavo editorial Added to Homebrew

    CompatibilityUnknown

    Fixes a table-display regression under load and an initialization issue affecting File Rename events in rare cases.

    Bug fixes
    Core Data changes now merge automatically.Fixes missing events in the main table under load.Fixes rare incorrect initialization of File Rename events.
  4. 1.9.0

    Expand

    Added to Homebrew

    CompatibilityUnknown

    No separate release notes for this version