Santa

Santa este un sistem de autorizare binară pentru macOS conceput pentru a controla și monitoriza ce binare pot fi executate pe baza unor reguli de încredere definite. Funcționează ca un software de whitelisting al aplicațiilor care previne rularea programelor neautorizate prin verificarea acestora față de hash-uri criptografice și certificate de semnare.

Sistemul oferă monitorizarea execuției prin înregistrarea fiecărui eveniment de lansare a unui binar pentru a crea o urmă vizibilă a execuției software. Permite logarea centralizată a auditului pentru a urmări lansările de aplicații reușite și refuzate pe mai multe dispozitive, asigurând conformitatea dispozitivelor enterprise prin reguli și log-uri sincronizate.

Controlul este gestionat printr-un sistem de reguli care utilizează checksum-uri criptografice, verificarea semnăturii digitale și potrivirea căilor prin expresii regulate. Framework-ul include interceptarea execuției la nivel de kernel pentru a verifica binarele înainte ca acestea să ruleze și menține o bază de date locală pentru înregistrarea activității și auditare.

Features

Binary Authorization Systems - Controls which applications and binaries can run on macOS devices using allow-lists and block-lists.
Binary Execution Tracking - Saves binary launch events and denied execution attempts into a database for security auditing and aggregation.
Binary Execution Authorization - Restricts the execution of binaries by verifying them against defined allow-lists or block-lists.
Hash-Based Binary Identification - Uses cryptographic checksums to uniquely identify files regardless of their name or location on the disk.
Local Security Auditing - Records denied execution attempts and software launches on the local machine to identify security policy violations.
Digital Signature Verifications - Validates the identity of software developers by checking digital signatures against a trusted root of authority.
Software Trust Rule Management - Defines software trust by setting binary permissions using cryptographic hashes, signing certificates, or regular expression path matches.
Kernel Execution Hooks - Implements kernel-level interception of system calls to verify binaries before they are allowed to execute.
Audit Logs - Provides a centralized logging system to track successful and denied application launches across multiple devices.
Execution Audit Trails - Tracks and logs every binary execution on the system to maintain a complete software execution audit trail.
Application Whitelisting Software - Prevents unauthorized software from running by checking binaries against cryptographic hashes and signing certificates.
Event Auditing Storage - Records binary execution attempts and system events in a local SQLite database for reliable auditing.
Resource Path Matching - Filters binary execution permissions based on directory patterns and file path naming conventions using regular expressions.
MacOS System Extensions - Functions as a system extension that monitors and controls binary execution based on trust rules.
Remote Rule Synchronization - Provides synchronization of binary execution rules and event logs with a central remote server.
Security Policy Synchronizations - Synchronizes allow-lists and block-lists from a central server to maintain consistent security policies across a fleet.
Enterprise Compliance Protocols - Ensures managed macOS computers adhere to organizational software execution policies via rule and log synchronization.
macOS System Monitors - Monitors binary launch events on macOS to create a visible software execution trail.
Search Utilities - Binary whitelisting and blacklisting system for macOS.
Endpoint Security - Manages binary allow-listing and deny-listing for macOS.
Securitate și confidențialitate - System-level binary whitelisting and blacklisting utility.
System Monitoring and Auditing - Binary whitelisting and blacklisting system for macOS.
System Security Hardening - Binary whitelisting and blacklisting system.

Istoric stele

Graficul istoricului de stele pentru google/santa

googlesantaArchived

Name: google/santa
Author: google

View on GitHub

4,510 stele287 fork-uriObjective-C++Apache-2.01 vizualizaresanta.dev

Santa

Features

Binary Authorization Systems - Controls which applications and binaries can run on macOS devices using allow-lists and block-lists.
Binary Execution Tracking - Saves binary launch events and denied execution attempts into a database for security auditing and aggregation.
Binary Execution Authorization - Restricts the execution of binaries by verifying them against defined allow-lists or block-lists.
Hash-Based Binary Identification - Uses cryptographic checksums to uniquely identify files regardless of their name or location on the disk.
Local Security Auditing - Records denied execution attempts and software launches on the local machine to identify security policy violations.
Digital Signature Verifications - Validates the identity of software developers by checking digital signatures against a trusted root of authority.
Software Trust Rule Management - Defines software trust by setting binary permissions using cryptographic hashes, signing certificates, or regular expression path matches.
Kernel Execution Hooks - Implements kernel-level interception of system calls to verify binaries before they are allowed to execute.
Audit Logs - Provides a centralized logging system to track successful and denied application launches across multiple devices.
Execution Audit Trails - Tracks and logs every binary execution on the system to maintain a complete software execution audit trail.
Application Whitelisting Software - Prevents unauthorized software from running by checking binaries against cryptographic hashes and signing certificates.
Event Auditing Storage - Records binary execution attempts and system events in a local SQLite database for reliable auditing.
Resource Path Matching - Filters binary execution permissions based on directory patterns and file path naming conventions using regular expressions.
MacOS System Extensions - Functions as a system extension that monitors and controls binary execution based on trust rules.
Remote Rule Synchronization - Provides synchronization of binary execution rules and event logs with a central remote server.
Security Policy Synchronizations - Synchronizes allow-lists and block-lists from a central server to maintain consistent security policies across a fleet.
Enterprise Compliance Protocols - Ensures managed macOS computers adhere to organizational software execution policies via rule and log synchronization.
macOS System Monitors - Monitors binary launch events on macOS to create a visible software execution trail.
Search Utilities - Binary whitelisting and blacklisting system for macOS.
Endpoint Security - Manages binary allow-listing and deny-listing for macOS.
Securitate și confidențialitate - System-level binary whitelisting and blacklisting utility.
System Monitoring and Auditing - Binary whitelisting and blacklisting system for macOS.
System Security Hardening - Binary whitelisting and blacklisting system.

Alternative open-source pentru Santa

Proiecte open-source similare, clasificate după numărul de funcționalități comune cu Santa.

cilium/tetragon
cilium/tetragon
4,753Vezi pe GitHub
Tetragon is an eBPF-based runtime security and observability toolset designed for Linux and Kubernetes environments. It functions as a security policy manager, observability agent, and enforcement engine that hooks into kernel functions and tracepoints to detect privilege escalation, container escapes, and unauthorized system activity. The project distinguishes itself through its ability to perform real-time, in-kernel enforcement, allowing it to synchronously terminate malicious processes or modify function return values before a system call completes. It provides deep Kubernetes integration
C
Vezi pe GitHub4,753
karpathy/llm-council
karpathy/llm-council
14,761Vezi pe GitHub
LLM Council is a framework for orchestrating multi-model workflows that generates consensus-based responses by querying multiple language models simultaneously. It functions as a multi-model orchestrator that distributes user prompts across various endpoints, aggregates the resulting outputs, and synthesizes them into a single, unified final answer through a designated chairman model. The system distinguishes itself by implementing an anonymized peer review loop, which masks model identities during the evaluation phase to ensure that critiques and rankings are based solely on output quality r
Python
Vezi pe GitHub14,761
hotcakex/harden-windows-security
HotCakeX/Harden-Windows-Security
4,139Vezi pe GitHub
Harden-Windows-Security is a security hardening tool and framework designed to reduce the attack surface of the Windows operating system through policy enforcement. It provides a collection of security presets and templates to implement official hardening standards across multiple devices. The project distinguishes itself through a comprehensive execution control system, featuring a manager for Windows Application Control and a kernel protection suite. It implements strict trust models, including kernel-mode driver whitelisting, signed policy implementation on the EFI partition, and code inte
C#1st-party-securityapplicationcontrolaudit
Vezi pe GitHub4,139
cerbos/cerbos
cerbos/cerbos
4,460Vezi pe GitHub
Cerbos is an open-source authorization service that provides a centralized, language-agnostic engine for managing access control. It functions as a policy-as-code platform, allowing teams to define, test, and distribute authorization rules using declarative YAML or JSON configurations. By decoupling access logic from application code, it enables consistent permission enforcement across diverse service stacks. The project distinguishes itself through its ability to translate high-level authorization policies into native database query filters. This capability allows applications to enforce sec
Goaccess-controlauthorizationgo
Vezi pe GitHub4,460

Vezi toate cele 30 alternative pentru Santa

Întrebări frecvente

Ce face google/santa?

Care sunt principalele funcționalități ale google/santa?

Principalele funcționalități ale google/santa sunt: Binary Authorization Systems, Binary Execution Tracking, Binary Execution Authorization, Hash-Based Binary Identification, Local Security Auditing, Digital Signature Verifications, Software Trust Rule Management, Kernel Execution Hooks.

Care sunt câteva alternative open-source pentru google/santa?

Alternativele open-source pentru google/santa includ: cilium/tetragon — Tetragon is an eBPF-based runtime security and observability toolset designed for Linux and Kubernetes environments.… karpathy/llm-council — LLM Council is a framework for orchestrating multi-model workflows that generates consensus-based responses by… hotcakex/harden-windows-security — Harden-Windows-Security is a security hardening tool and framework designed to reduce the attack surface of the… cerbos/cerbos — Cerbos is an open-source authorization service that provides a centralized, language-agnostic engine for managing… alichtman/stronghold — Easily configure macOS security settings from the terminal. paretosecurity/pareto-mac — Automatically audit your Mac for basic security hygiene.

Santa

Features

Istoric stele

Santa

Features

Alternative open-source pentru Santa

cilium/tetragon

karpathy/llm-council

HotCakeX/Harden-Windows-Security

cerbos/cerbos

Întrebări frecvente

Istoric stele

Alternative open-source pentru Santa

cilium/tetragon

karpathy/llm-council

HotCakeX/Harden-Windows-Security

cerbos/cerbos

Întrebări frecvente