[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"package:cask:knockknock:zh":3,"releases:stats:cask:knockknock:zh":495,"related:cask:knockknock:zh":496,"markdown:3:1953:1bgp4dw":551},{"accentColor":4,"artifacts":5,"autoUpdates":29,"categories":30,"conflictsWith":36,"dependsOn":39,"deprecated":29,"description":47,"descriptionEn":48,"developer":49,"disabled":29,"displayName":50,"downloadSha256":51,"downloadSize":52,"downloadUrl":53,"editorChoice":29,"formulaeUrl":54,"homepage":55,"iconUrl":56,"installCommand":57,"installs":58,"installs30d":59,"isFont":29,"isLibrary":29,"kegOnly":29,"kind":62,"latestRelease":63,"machineTranslated":29,"name":50,"names":93,"platforms":95,"primaryCategory":467,"rank30d":468,"releaseCount":469,"releaseStats":470,"repoUrl":476,"screenshots":477,"sourceLocale":87,"sourceUrl":485,"summary":486,"summaryTranslation":487,"supports":488,"tags":490,"tap":494,"token":94,"version":92,"versionChangedAt":68},"#98BA4E",{"apps":6,"binaries":8,"entries":9,"pkgs":28},[7],"KnockKnock.app",[],[10,17],{"declaration":11,"phase":14,"sources":15,"target":13,"type":16},{"app":12,"target":13},[7],"\u002FApplications\u002FKnockKnock.app","install",[7],"app",{"declaration":18,"phase":25,"sources":26,"type":27},{"zap":19},[20],{"trash":21},[22,23,24],"~\u002FLibrary\u002FCaches\u002Fcom.objective-see.KnockKnock","~\u002FLibrary\u002FPreferences\u002Fcom.objective-see.KnockKnock.plist","~\u002FLibrary\u002FSaved Application State\u002Fcom.objective-see.KnockKnock.savedState","cleanup",[],"zap",[],false,[31],{"icon":32,"machineTranslated":29,"name":33,"slug":34,"sourceLocale":35},"lucide:shield","安全与隐私","security","zh-CN",{"casks":37,"formulae":38},[],[],{"arch":40,"casks":43,"formulae":44,"requirements":45},[41,42],"arm64","x86_64",[],[],{"macos":46},{},"KnockKnock 是 Objective-See Foundation 的 macOS 持久化检查工具。它会枚举配置为在启动、登录或其他应用启动时自动运行的软件，帮助用户和安全分析人员调查 Mac 上仍安装着哪些内容。它是检查辅助工具，并不能保证机器没有恶意软件。\n\n## 扫描内容\n类别包括后台受管理任务、启动项、cron 作业、浏览器扩展及其他持久化机制。选择类别后会显示项目路径和签名信息，并提供查看详情或在 Finder 中显示项目的控件。版本 4 增加了 Shell 配置检查和可选的登录时启动流程；4.1.0 扩展了枚举范围并改进了 launchd 覆盖项的处理。\n\n默认情况下，已知的平台项目和 Apple 签名项目会被筛除。合法的第三方软件仍会显示。出现在扫描结果中并不代表该项目是恶意软件，而 VirusTotal 结果缺失或未知也不能证明其具有恶意。采取行动前，请检查项目的发布者、路径、用途和行为。\n\n可将扫描结果保存为 JSON，并将当前已完成的扫描与先前结果进行比较，以识别新增、移除或修改的项目。应用程序包还提供命令行扫描模式，便于重复检查。提升权限的扫描可覆盖其他用户的 cron 作业等额外区域；4.1.0 新增了始终以 root 身份运行的偏好设置，同时保留控制台用户相关的偏好设置和路径。\n\n## 安装与兼容性\n下载官方 ZIP，解压后启动 KnockKnock.app。发布者表示，该应用可从任意位置运行，无需单独安装；通过 Homebrew cask 安装时，会将其作为应用程序复制到系统中，并使用 `brew install --cask knockknock`。官方产品页面注明需要 macOS 10.15 或更高版本。已解压官方 4.1.0 ZIP，但未启动或安装。其可执行文件经验证为通用 Mach-O，包含 x86_64 和 arm64 切片，支持 Intel 和 Apple 芯片；其 Info.plist 确认最低要求为 macOS 10.15。\n\n官方 4.1.0 GitHub 发布页面记录该 ZIP 大小为 2,552,206 字节，并提供 SHA-256 校验和。cask 未声明额外的 Homebrew formula 依赖项或指定冲突项。扫描范围可能需要“完全磁盘访问权限”，应用可提示你通过“系统设置”授予此权限。提升扫描权限或启用明确的 root 偏好设置时，才涉及管理员\u002Froot 授权；这并不意味着应盲目提升所有下载的安全工具的权限。\n\n## VirusTotal、账户与隐私\nVirusTotal 集成是可选的，且可配置。如需基于哈希值查询信誉信息，请提供自己的 VirusTotal API 密钥，并遵守其配额和条款。普通本地检查不要求必须拥有 Objective-See 账户。若要避免发送查询请求，请关闭 VirusTotal 集成；如果你的政策要求如此，也可关闭自动检查更新。\n\n哈希查询和上传文件是不同操作。信誉检查会发送二进制文件的哈希值；明确提交未知文件则会将文件本身发送到 VirusTotal。不了解服务的共享政策时，请勿上传机密、专有或个人文件。版本 4.0.3 将提交复选框改为默认不勾选。JSON 扫描导出文件可能泄露已安装应用、文件路径及其他敏感系统详情；分享前请妥善保护这些文件。\n\n## 费用、许可与结果解读\nKnockKnock 免费提供，其源代码仓库采用 GNU GPL 第 3 版许可。Objective-See Foundation 接受赞助和捐赠。VirusTotal 及其他外部服务各自适用独立条款。开源检查工具不能替代备份、事件响应专业知识或更全面的安全策略。\n\n代码签名和公证可提供有用的来源可信度信号，但无法解决所有安全问题。持久化的 Shell 或 Python 解释器可能会运行单独的脚本；即使解释器本身已签名，该脚本也值得检查。不要仅仅因为不熟悉就删除启动代理、库或系统配置。修改持久化软件前，请核实其所有者和用途，并确保有恢复途径。\n\n来源：[官方产品与使用指南](https:\u002F\u002Fobjective-see.org\u002Fproducts\u002Fknockknock.html)、[发布者源代码](https:\u002F\u002Fgithub.com\u002Fobjective-see\u002FKnockKnock)、[4.1.0 发布](https:\u002F\u002Fgithub.com\u002Fobjective-see\u002FKnockKnock\u002Freleases\u002Ftag\u002Fv4.1.0)、[许可](https:\u002F\u002Fgithub.com\u002Fobjective-see\u002FKnockKnock\u002Fblob\u002Fmaster\u002FLICENSE)。","Tool to show what is persistently installed on the computer","Objective-See Foundation","KnockKnock","98eae6cda5a7e122e6c7e68622617c00d6533a909f505f002c93dd90941a3f9e",2552206,"https:\u002F\u002Fgithub.com\u002Fobjective-see\u002FKnockKnock\u002Freleases\u002Fdownload\u002Fv4.1.0\u002FKnockKnock_4.1.0.zip","https:\u002F\u002Fformulae.brew.sh\u002Fcask\u002Fknockknock","https:\u002F\u002Fobjective-see.org\u002Fproducts\u002Fknockknock.html","https:\u002F\u002Fcdn.opennavo.com\u002Ficons\u002Fuploads\u002F23ce1d90c940\u002F3f4ce0bdaf9a-256.png","brew install --cask knockknock",{"d30":59,"d365":60,"d90":61},338,5573,1360,"cask",{"bodyMarkdown":64,"brewCommittedAt":65,"hasNotes":66,"id":67,"isLatest":66,"isPrerelease":29,"machineTranslated":29,"publishedAt":68,"sections":69,"source":86,"sourceLocale":87,"summary":88,"title":89,"translation":90,"version":92},"## KnockKnock 4.1.0\n\n新增 root 模式偏好设置和 macOS 27 兼容性，并强化扫描安全性。\n\n### 新增\n\n- 新增始终以 root 身份运行的偏好设置，使用控制台用户设置。\n\n### 修复\n\n- 修复 macOS 27 上的“完全磁盘访问权限”检测。\n- 修正 launchd 启用\u002F停用逻辑及支持域的覆盖设置。\n- JSON 序列化失败时保留扫描项目。\n\n### 改进\n\n- 隔离插件扫描，并防护格式错误或过大的输入文件。\n- 改进 LaunchItems、BTM、dylib、cron 和浏览器扩展的枚举。\n- 配额耗尽后停止后续 VirusTotal 查询。\n\n\n\n来源：[官方发行说明](https:\u002F\u002Fgithub.com\u002Fobjective-see\u002FKnockKnock\u002Freleases\u002Ftag\u002Fv4.1.0)。","2026-09-15T10:36:09Z",true,2595,"2026-10-07T09:38:37.849603Z",[70,74,80],{"area":71,"items":72},"新增",[73],"新增始终以 root 身份运行的偏好设置，使用控制台用户设置。",{"area":75,"items":76},"修复",[77,78,79],"修复 macOS 27 上的“完全磁盘访问权限”检测。","修正 launchd 启用\u002F停用逻辑及支持域的覆盖设置。","JSON 序列化失败时保留扫描项目。",{"area":81,"items":82},"改进",[83,84,85],"隔离插件扫描，并防护格式错误或过大的输入文件。","改进 LaunchItems、BTM、dylib、cron 和浏览器扩展的枚举。","配额耗尽后停止后续 VirusTotal 查询。","editorial","en-US","新增 root 模式偏好设置和 macOS 27 兼容性，并强化扫描安全性。","KnockKnock 4.1.0",{"locale":35,"machineTranslated":29,"sourceLocale":87,"status":91},"manual","4.1.0",[50,94],"knockknock",[96,123,149,176,202,229,255,282,308,335,361,388,414,441],{"arch":42,"artifacts":97,"conflictsWith":112,"dependsOn":115,"downloadSha256":51,"downloadUrl":53,"macos":121,"requiresRosetta":29,"tag":122,"version":92},{"apps":98,"binaries":99,"entries":100,"pkgs":111},[7],[],[101,105],{"declaration":102,"phase":14,"sources":104,"target":13,"type":16},{"app":103,"target":13},[7],[7],{"declaration":106,"phase":25,"sources":110,"type":27},{"zap":107},[108],{"trash":109},[22,23,24],[],[],{"casks":113,"formulae":114},[],[],{"arch":116,"casks":117,"formulae":118,"requirements":119},[42],[],[],{"macos":120},{},"27","golden_gate",{"arch":41,"artifacts":124,"conflictsWith":139,"dependsOn":142,"downloadSha256":51,"downloadUrl":53,"macos":121,"requiresRosetta":29,"tag":148,"version":92},{"apps":125,"binaries":126,"entries":127,"pkgs":138},[7],[],[128,132],{"declaration":129,"phase":14,"sources":131,"target":13,"type":16},{"app":130,"target":13},[7],[7],{"declaration":133,"phase":25,"sources":137,"type":27},{"zap":134},[135],{"trash":136},[22,23,24],[],[],{"casks":140,"formulae":141},[],[],{"arch":143,"casks":144,"formulae":145,"requirements":146},[41],[],[],{"macos":147},{},"arm64_golden_gate",{"arch":42,"artifacts":150,"conflictsWith":165,"dependsOn":168,"downloadSha256":51,"downloadUrl":53,"macos":174,"requiresRosetta":29,"tag":175,"version":92},{"apps":151,"binaries":152,"entries":153,"pkgs":164},[7],[],[154,158],{"declaration":155,"phase":14,"sources":157,"target":13,"type":16},{"app":156,"target":13},[7],[7],{"declaration":159,"phase":25,"sources":163,"type":27},{"zap":160},[161],{"trash":162},[22,23,24],[],[],{"casks":166,"formulae":167},[],[],{"arch":169,"casks":170,"formulae":171,"requirements":172},[42],[],[],{"macos":173},{},"26","tahoe",{"arch":41,"artifacts":177,"conflictsWith":192,"dependsOn":195,"downloadSha256":51,"downloadUrl":53,"macos":174,"requiresRosetta":29,"tag":201,"version":92},{"apps":178,"binaries":179,"entries":180,"pkgs":191},[7],[],[181,185],{"declaration":182,"phase":14,"sources":184,"target":13,"type":16},{"app":183,"target":13},[7],[7],{"declaration":186,"phase":25,"sources":190,"type":27},{"zap":187},[188],{"trash":189},[22,23,24],[],[],{"casks":193,"formulae":194},[],[],{"arch":196,"casks":197,"formulae":198,"requirements":199},[41],[],[],{"macos":200},{},"arm64_tahoe",{"arch":42,"artifacts":203,"conflictsWith":218,"dependsOn":221,"downloadSha256":51,"downloadUrl":53,"macos":227,"requiresRosetta":29,"tag":228,"version":92},{"apps":204,"binaries":205,"entries":206,"pkgs":217},[7],[],[207,211],{"declaration":208,"phase":14,"sources":210,"target":13,"type":16},{"app":209,"target":13},[7],[7],{"declaration":212,"phase":25,"sources":216,"type":27},{"zap":213},[214],{"trash":215},[22,23,24],[],[],{"casks":219,"formulae":220},[],[],{"arch":222,"casks":223,"formulae":224,"requirements":225},[42],[],[],{"macos":226},{},"15","sequoia",{"arch":41,"artifacts":230,"conflictsWith":245,"dependsOn":248,"downloadSha256":51,"downloadUrl":53,"macos":227,"requiresRosetta":29,"tag":254,"version":92},{"apps":231,"binaries":232,"entries":233,"pkgs":244},[7],[],[234,238],{"declaration":235,"phase":14,"sources":237,"target":13,"type":16},{"app":236,"target":13},[7],[7],{"declaration":239,"phase":25,"sources":243,"type":27},{"zap":240},[241],{"trash":242},[22,23,24],[],[],{"casks":246,"formulae":247},[],[],{"arch":249,"casks":250,"formulae":251,"requirements":252},[41],[],[],{"macos":253},{},"arm64_sequoia",{"arch":42,"artifacts":256,"conflictsWith":271,"dependsOn":274,"downloadSha256":51,"downloadUrl":53,"macos":280,"requiresRosetta":29,"tag":281,"version":92},{"apps":257,"binaries":258,"entries":259,"pkgs":270},[7],[],[260,264],{"declaration":261,"phase":14,"sources":263,"target":13,"type":16},{"app":262,"target":13},[7],[7],{"declaration":265,"phase":25,"sources":269,"type":27},{"zap":266},[267],{"trash":268},[22,23,24],[],[],{"casks":272,"formulae":273},[],[],{"arch":275,"casks":276,"formulae":277,"requirements":278},[42],[],[],{"macos":279},{},"14","sonoma",{"arch":41,"artifacts":283,"conflictsWith":298,"dependsOn":301,"downloadSha256":51,"downloadUrl":53,"macos":280,"requiresRosetta":29,"tag":307,"version":92},{"apps":284,"binaries":285,"entries":286,"pkgs":297},[7],[],[287,291],{"declaration":288,"phase":14,"sources":290,"target":13,"type":16},{"app":289,"target":13},[7],[7],{"declaration":292,"phase":25,"sources":296,"type":27},{"zap":293},[294],{"trash":295},[22,23,24],[],[],{"casks":299,"formulae":300},[],[],{"arch":302,"casks":303,"formulae":304,"requirements":305},[41],[],[],{"macos":306},{},"arm64_sonoma",{"arch":42,"artifacts":309,"conflictsWith":324,"dependsOn":327,"downloadSha256":51,"downloadUrl":53,"macos":333,"requiresRosetta":29,"tag":334,"version":92},{"apps":310,"binaries":311,"entries":312,"pkgs":323},[7],[],[313,317],{"declaration":314,"phase":14,"sources":316,"target":13,"type":16},{"app":315,"target":13},[7],[7],{"declaration":318,"phase":25,"sources":322,"type":27},{"zap":319},[320],{"trash":321},[22,23,24],[],[],{"casks":325,"formulae":326},[],[],{"arch":328,"casks":329,"formulae":330,"requirements":331},[42],[],[],{"macos":332},{},"13","ventura",{"arch":41,"artifacts":336,"conflictsWith":351,"dependsOn":354,"downloadSha256":51,"downloadUrl":53,"macos":333,"requiresRosetta":29,"tag":360,"version":92},{"apps":337,"binaries":338,"entries":339,"pkgs":350},[7],[],[340,344],{"declaration":341,"phase":14,"sources":343,"target":13,"type":16},{"app":342,"target":13},[7],[7],{"declaration":345,"phase":25,"sources":349,"type":27},{"zap":346},[347],{"trash":348},[22,23,24],[],[],{"casks":352,"formulae":353},[],[],{"arch":355,"casks":356,"formulae":357,"requirements":358},[41],[],[],{"macos":359},{},"arm64_ventura",{"arch":42,"artifacts":362,"conflictsWith":377,"dependsOn":380,"downloadSha256":51,"downloadUrl":53,"macos":386,"requiresRosetta":29,"tag":387,"version":92},{"apps":363,"binaries":364,"entries":365,"pkgs":376},[7],[],[366,370],{"declaration":367,"phase":14,"sources":369,"target":13,"type":16},{"app":368,"target":13},[7],[7],{"declaration":371,"phase":25,"sources":375,"type":27},{"zap":372},[373],{"trash":374},[22,23,24],[],[],{"casks":378,"formulae":379},[],[],{"arch":381,"casks":382,"formulae":383,"requirements":384},[42],[],[],{"macos":385},{},"12","monterey",{"arch":41,"artifacts":389,"conflictsWith":404,"dependsOn":407,"downloadSha256":51,"downloadUrl":53,"macos":386,"requiresRosetta":29,"tag":413,"version":92},{"apps":390,"binaries":391,"entries":392,"pkgs":403},[7],[],[393,397],{"declaration":394,"phase":14,"sources":396,"target":13,"type":16},{"app":395,"target":13},[7],[7],{"declaration":398,"phase":25,"sources":402,"type":27},{"zap":399},[400],{"trash":401},[22,23,24],[],[],{"casks":405,"formulae":406},[],[],{"arch":408,"casks":409,"formulae":410,"requirements":411},[41],[],[],{"macos":412},{},"arm64_monterey",{"arch":42,"artifacts":415,"conflictsWith":430,"dependsOn":433,"downloadSha256":51,"downloadUrl":53,"macos":439,"requiresRosetta":29,"tag":440,"version":92},{"apps":416,"binaries":417,"entries":418,"pkgs":429},[7],[],[419,423],{"declaration":420,"phase":14,"sources":422,"target":13,"type":16},{"app":421,"target":13},[7],[7],{"declaration":424,"phase":25,"sources":428,"type":27},{"zap":425},[426],{"trash":427},[22,23,24],[],[],{"casks":431,"formulae":432},[],[],{"arch":434,"casks":435,"formulae":436,"requirements":437},[42],[],[],{"macos":438},{},"11","big_sur",{"arch":41,"artifacts":442,"conflictsWith":457,"dependsOn":460,"downloadSha256":51,"downloadUrl":53,"macos":439,"requiresRosetta":29,"tag":466,"version":92},{"apps":443,"binaries":444,"entries":445,"pkgs":456},[7],[],[446,450],{"declaration":447,"phase":14,"sources":449,"target":13,"type":16},{"app":448,"target":13},[7],[7],{"declaration":451,"phase":25,"sources":455,"type":27},{"zap":452},[453],{"trash":454},[22,23,24],[],[],{"casks":458,"formulae":459},[],[],{"arch":461,"casks":462,"formulae":463,"requirements":464},[41],[],[],{"macos":465},{},"arm64_big_sur",{"icon":32,"machineTranslated":29,"name":33,"slug":34,"sourceLocale":35},369,9,{"brewLag":471,"cadence":475,"count30d":473},{"compared":472,"earlierCount":473,"medianMinutes":474},3,1,153722867,"irregular","https:\u002F\u002Fgithub.com\u002Fobjective-see\u002FKnockKnock",[478],{"caption":479,"height":480,"machineTranslated":66,"sourceLocale":87,"theme":481,"thumbUrl":482,"url":483,"width":484},"KnockKnock 4.0.2 的官方 Mac 界面，显示持久化类别和受管理的后台任务。",703,"dark","https:\u002F\u002Fcdn.opennavo.com\u002Fscreenshots\u002Fuploads\u002Fscreenshot\u002F3c19409e7f87\u002F447ee4f62e4c-640.png","https:\u002F\u002Fcdn.opennavo.com\u002Fscreenshots\u002Fuploads\u002Fscreenshot\u002F3c19409e7f87\u002F447ee4f62e4c-1280.png",1280,"https:\u002F\u002Fgithub.com\u002Fhomebrew\u002Fhomebrew-cask\u002Fblob\u002FHEAD\u002FCasks\u002Fk\u002Fknockknock.rb","Mac 持久化检查工具，可列出自动启动的软件、显示签名详情，并可选用 VirusTotal 检查文件哈希。",{"locale":35,"machineTranslated":29,"sourceLocale":87,"status":91},{"arm64":66,"requiresRosetta":29,"status":489,"x86_64":66},"known",[491,492,493],"Security","Malware Analysis","macOS","homebrew\u002Fcask",null,[497,508,519,529,541],{"accentColor":498,"autoUpdates":66,"deprecated":29,"disabled":29,"displayName":499,"editorChoice":29,"iconUrl":500,"installs30d":501,"isFont":29,"isLibrary":29,"kind":62,"machineTranslated":29,"name":499,"primaryCategory":502,"rank30d":503,"sourceLocale":87,"summary":504,"token":505,"version":506,"versionChangedAt":507},"#8255F7","Proton Pass","https:\u002F\u002Fcdn.opennavo.com\u002Ficons\u002Fuploads\u002Feef385d881fb\u002F685b7444b9d8-256.png",319,{"icon":32,"machineTranslated":29,"name":33,"slug":34,"sourceLocale":35},387,"Proton 的密码和安全信息管理器，支持加密保险库同步、账户访问及受支持的桌面离线工作流程。","proton-pass","1.42.0","2026-10-07T19:15:22.611357Z",{"accentColor":509,"autoUpdates":29,"deprecated":29,"disabled":29,"displayName":510,"editorChoice":29,"iconUrl":511,"installs30d":512,"isFont":29,"isLibrary":29,"kind":62,"machineTranslated":66,"name":510,"primaryCategory":513,"rank30d":514,"sourceLocale":87,"summary":515,"token":516,"version":517,"versionChangedAt":518},"#0254ED","Wiz CLI","https:\u002F\u002Fcdn.opennavo.com\u002Ficons\u002Fuploads\u002Fc1d4bd8bff09\u002Fd2951ab33dfc-256.png",393,{"icon":32,"machineTranslated":29,"name":33,"slug":34,"sourceLocale":35},339,"Wiz 的命令行安全扫描器，用于在开发和 CI 工作流中检查应用程序代码、基础设施定义以及容器或虚拟机镜像。","wizcli","1.78.0","2026-10-07T09:38:44.668496Z",{"accentColor":520,"autoUpdates":29,"deprecated":29,"disabled":29,"displayName":521,"editorChoice":29,"iconUrl":522,"installs30d":523,"isFont":29,"isLibrary":29,"kind":62,"machineTranslated":66,"name":521,"primaryCategory":524,"rank30d":525,"sourceLocale":87,"summary":526,"token":527,"version":528,"versionChangedAt":518},"#99C93D","Yubico Authenticator","https:\u002F\u002Fcdn.opennavo.com\u002Ficons\u002Fuploads\u002F36f1749ddde5\u002F92a2eb386be4-256.png",354,{"icon":32,"machineTranslated":29,"name":33,"slug":34,"sourceLocale":35},364,"免费的 YubiKey 配套应用，可用于硬件保护的一次性密码、通行密钥、PIN、PIV 证书及受支持的密钥配置。","yubico-authenticator","7.4.1",{"accentColor":530,"autoUpdates":29,"deprecated":29,"disabled":29,"displayName":531,"editorChoice":29,"iconUrl":532,"installs30d":533,"isFont":29,"isLibrary":29,"kind":62,"machineTranslated":66,"name":534,"primaryCategory":535,"rank30d":536,"sourceLocale":87,"summary":537,"token":538,"version":539,"versionChangedAt":540},"#3A95F1","1Password CLI 测试版","https:\u002F\u002Fcdn.opennavo.com\u002Ficons\u002Fuploads\u002Fde9c97fb9de0\u002F94f053ebc64b-256.png",356,"1Password CLI",{"icon":32,"machineTranslated":29,"name":33,"slug":34,"sourceLocale":35},360,"1Password 的 op 命令行工具的测试版渠道，用于经授权的保管库访问、密钥引用和脚本化开发工作流。","1password-cli@beta","2.42.0-beta.01","2026-10-09T07:15:26.193153Z",{"accentColor":542,"autoUpdates":66,"deprecated":29,"disabled":29,"displayName":543,"editorChoice":29,"iconUrl":544,"installs30d":545,"isFont":29,"isLibrary":29,"kind":62,"machineTranslated":29,"name":543,"primaryCategory":546,"rank30d":547,"sourceLocale":87,"summary":548,"token":549,"version":550,"versionChangedAt":68},"#41A7E8","Little Snitch","https:\u002F\u002Fcdn.opennavo.com\u002Ficons\u002Fuploads\u002Fa9016e5d3ad2\u002Fa285c84831d0-256.png",237,{"icon":32,"machineTranslated":29,"name":33,"slug":34,"sourceLocale":35},474,"监控 Mac 网络连接，并通过防火墙规则、配置文件、拦截列表和加密 DNS 控制应用访问。","little-snitch","6.5","\u003Cp>KnockKnock 是 Objective-See Foundation 的 macOS 持久化检查工具。它会枚举配置为在启动、登录或其他应用启动时自动运行的软件，帮助用户和安全分析人员调查 Mac 上仍安装着哪些内容。它是检查辅助工具，并不能保证机器没有恶意软件。\u003C\u002Fp>\n\u003Ch3 class=\"on-md-heading-1\">扫描内容\u003C\u002Fh3>\n\u003Cp>类别包括后台受管理任务、启动项、cron 作业、浏览器扩展及其他持久化机制。选择类别后会显示项目路径和签名信息，并提供查看详情或在 Finder 中显示项目的控件。版本 4 增加了 Shell 配置检查和可选的登录时启动流程；4.1.0 扩展了枚举范围并改进了 launchd 覆盖项的处理。\u003C\u002Fp>\n\u003Cp>默认情况下，已知的平台项目和 Apple 签名项目会被筛除。合法的第三方软件仍会显示。出现在扫描结果中并不代表该项目是恶意软件，而 VirusTotal 结果缺失或未知也不能证明其具有恶意。采取行动前，请检查项目的发布者、路径、用途和行为。\u003C\u002Fp>\n\u003Cp>可将扫描结果保存为 JSON，并将当前已完成的扫描与先前结果进行比较，以识别新增、移除或修改的项目。应用程序包还提供命令行扫描模式，便于重复检查。提升权限的扫描可覆盖其他用户的 cron 作业等额外区域；4.1.0 新增了始终以 root 身份运行的偏好设置，同时保留控制台用户相关的偏好设置和路径。\u003C\u002Fp>\n\u003Ch3 class=\"on-md-heading-1\">安装与兼容性\u003C\u002Fh3>\n\u003Cp>下载官方 ZIP，解压后启动 KnockKnock.app。发布者表示，该应用可从任意位置运行，无需单独安装；通过 Homebrew cask 安装时，会将其作为应用程序复制到系统中，并使用 \u003Ccode>brew install --cask knockknock\u003C\u002Fcode>。官方产品页面注明需要 macOS 10.15 或更高版本。已解压官方 4.1.0 ZIP，但未启动或安装。其可执行文件经验证为通用 Mach-O，包含 x86_64 和 arm64 切片，支持 Intel 和 Apple 芯片；其 Info.plist 确认最低要求为 macOS 10.15。\u003C\u002Fp>\n\u003Cp>官方 4.1.0 GitHub 发布页面记录该 ZIP 大小为 2,552,206 字节，并提供 SHA-256 校验和。cask 未声明额外的 Homebrew formula 依赖项或指定冲突项。扫描范围可能需要“完全磁盘访问权限”，应用可提示你通过“系统设置”授予此权限。提升扫描权限或启用明确的 root 偏好设置时，才涉及管理员\u002Froot 授权；这并不意味着应盲目提升所有下载的安全工具的权限。\u003C\u002Fp>\n\u003Ch3 class=\"on-md-heading-1\">VirusTotal、账户与隐私\u003C\u002Fh3>\n\u003Cp>VirusTotal 集成是可选的，且可配置。如需基于哈希值查询信誉信息，请提供自己的 VirusTotal API 密钥，并遵守其配额和条款。普通本地检查不要求必须拥有 Objective-See 账户。若要避免发送查询请求，请关闭 VirusTotal 集成；如果你的政策要求如此，也可关闭自动检查更新。\u003C\u002Fp>\n\u003Cp>哈希查询和上传文件是不同操作。信誉检查会发送二进制文件的哈希值；明确提交未知文件则会将文件本身发送到 VirusTotal。不了解服务的共享政策时，请勿上传机密、专有或个人文件。版本 4.0.3 将提交复选框改为默认不勾选。JSON 扫描导出文件可能泄露已安装应用、文件路径及其他敏感系统详情；分享前请妥善保护这些文件。\u003C\u002Fp>\n\u003Ch3 class=\"on-md-heading-1\">费用、许可与结果解读\u003C\u002Fh3>\n\u003Cp>KnockKnock 免费提供，其源代码仓库采用 GNU GPL 第 3 版许可。Objective-See Foundation 接受赞助和捐赠。VirusTotal 及其他外部服务各自适用独立条款。开源检查工具不能替代备份、事件响应专业知识或更全面的安全策略。\u003C\u002Fp>\n\u003Cp>代码签名和公证可提供有用的来源可信度信号，但无法解决所有安全问题。持久化的 Shell 或 Python 解释器可能会运行单独的脚本；即使解释器本身已签名，该脚本也值得检查。不要仅仅因为不熟悉就删除启动代理、库或系统配置。修改持久化软件前，请核实其所有者和用途，并确保有恢复途径。\u003C\u002Fp>\n\u003Cp>来源：\u003Ca href=\"https:\u002F\u002Fobjective-see.org\u002Fproducts\u002Fknockknock.html\" target=\"_blank\" rel=\"noopener noreferrer\">官方产品与使用指南\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fobjective-see\u002FKnockKnock\" target=\"_blank\" rel=\"noopener noreferrer\">发布者源代码\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fobjective-see\u002FKnockKnock\u002Freleases\u002Ftag\u002Fv4.1.0\" target=\"_blank\" rel=\"noopener noreferrer\">4.1.0 发布\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fobjective-see\u002FKnockKnock\u002Fblob\u002Fmaster\u002FLICENSE\" target=\"_blank\" rel=\"noopener noreferrer\">许可\u003C\u002Fa>。\u003C\u002Fp>\n"]