RansomWhere

Objective-See · A macOS utility that detects rapid file encryption by untrusted processes and pauses them for your review.

CaskSecurity & PrivacyApple silicon · Intel

Homepage

From homebrew/cask

30-day installs20#1276 in App

1-year installs506Last 365 days

Latest version2.2.0Aug 5 · Aug 5

Download size4.6MBarm64 / x86_64 · zip

Release cadenceEvery 2 weeks0 releases in 30 days

System and architecture

System requirements: Not confirmed

Platform availability

macOS 27 · Intel · 2.2.0 Not confirmed
macOS 27 · Apple chip · 2.2.0 Not confirmed · Requires Rosetta
macOS 26 · Intel · 2.2.0 Not confirmed
macOS 26 · Apple chip · 2.2.0 Not confirmed · Requires Rosetta
macOS 15 · Intel · 2.2.0 Not confirmed
macOS 15 · Apple chip · 2.2.0 Not confirmed · Requires Rosetta
macOS 14 · Intel · 2.2.0 Not confirmed
macOS 14 · Apple chip · 2.2.0 Not confirmed · Requires Rosetta
macOS 13 · Intel · 2.2.0 Not confirmed
macOS 13 · Apple chip · 2.2.0 Not confirmed · Requires Rosetta
macOS 12 · Intel · 2.2.0 Not confirmed
macOS 12 · Apple chip · 2.2.0 Not confirmed · Requires Rosetta
macOS 11 · Intel · 2.2.0 Not confirmed
macOS 11 · Apple chip · 2.2.0 Not confirmed · Requires Rosetta

View full declaration

{
  "macos": {}
}

Tap: homebrew/cask
Also known as: RansomWhere · ransomwhere
Download URL: github.com/objective-see/RansomWhere/releases/download/v2.2.0/RansomWhere_2.2.0.zip
SHA-256: 982b0b9c3027947e…
Homebrew definition: github.com/homebrew/homebrew-cask/blob/HEAD/Casks/r/ransomwhere.rb
formulae.brew.sh: formulae.brew.sh/cask/ransomwhere
Source code: github.com/objective-see/RansomWhere

Installation and removal contents

Uninstall uninstall

View full declaration

{
  "uninstall": [
    {
      "script": {
        "args": [
          "-uninstall",
          "1"
        ],
        "executable": "$HOMEBREW_PREFIX/Caskroom/ransomwhere/2.2.0/RansomWhere Installer.app/Contents/Resources/configure.sh",
        "sudo": true
      }
    }
  ]
}

Install installer

View full declaration

{
  "installer": [
    {
      "script": {
        "args": [
          "-install"
        ],
        "executable": "$HOMEBREW_PREFIX/Caskroom/ransomwhere/2.2.0/RansomWhere Installer.app/Contents/Resources/configure.sh",
        "sudo": true
      }
    }
  ]
}

Install installer

View full declaration

{
  "installer": [
    {
      "script": {
        "args": [
          "bootstrap",
          "system",
          "/Library/LaunchDaemons/com.objective-see.ransomwhere.plist"
        ],
        "executable": "launchctl",
        "sudo": true
      }
    }
  ]
}

Caveats

ransomwhere requires full disk access permissions.

    Enable or re-enable it in:
      System Settings → Privacy & Security → Full Disk Access