---
id: 1847
title: "Sinter: New user-mode security enforcement for macOS"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2020/08/12/sinter-new-user-mode-security-enforcement-for-macos/"
published_at: "2020-08-12T05:41:16Z"
tags: ["open-source", "endpoint-security", "macos", "swift", "endpointsecurity-api", "user-mode"]
phying_url: "https://phying.com/item/1847"
lang: en
---

# Sinter: New user-mode security enforcement for macOS

## Summary

Sinter is an open-source macOS endpoint security agent written entirely in Swift, running 100% user-mode on Apple's EndpointSecurity API with rules for authorizing security-relevant events.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2020-08-12T05:41:16Z
- **Original:** https://blog.trailofbits.com/2020/08/12/sinter-new-user-mode-security-enforcement-for-macos/
- **Phying News:** https://phying.com/item/1847