Crescendo

{
  "alternatives": [],
  "artifacts": [
    {
      "app": [
        "Crescendo.app"
      ],
      "target": "/Applications/Crescendo.app"
    },
    {
      "zap": [
        {
          "trash": "~/Library/Saved Application State/com.suprhackersteve.crescendo.savedState"
        }
      ]
    }
  ],
  "auto_updates": null,
  "categories": [],
  "deprecated": 0,
  "deprecation_reason": null,
  "desc": "Real time event viewer",
  "disable_reason": null,
  "disabled": 0,
  "display_name": "Crescendo",
  "enrichment_fetched_at": "2026-06-20T22:41:49+00:00",
  "first_seen": "2026-06-20T00:47:34+00:00",
  "full_token": "crescendo",
  "github_default_branch": "master",
  "github_last_commit_at": "2021-07-22T02:07:59Z",
  "github_readme_excerpt": "![Cover](assets/cover.png)\n\n# Table of Contents\n\n1. [Getting Started](#Getting-Started)\n2. [Requirements](#requirements)\n3. [Components](#Components)\n4. [Testing and Development](#testing-and-development)\n5. [Signing](#signing)\n6. [Building](#building)\n7. [Issues/Bugs/Features](#Issues/Bugs/Features)\n8. [Troubleshooting](#Troubleshooting)\n9. [TODO](#todo)\n\n---\n\n![Crescendo Demo](assets/demo.png)\n\n---\n\n## Getting Started\n\nApple has introduced some new security mechanisms that we need to enable to get Crescendo running.\n\n1. Ensure that you have moved the app to your /Applications director or the system extension will fail to load.\n2. For the first run you will be prompted to approve the system extension, after clicking the \"Start\" button.\n\n   _NOTE: I have noticed that there is an issue where System Preferences won\u0027t show an allow button. I assume this is some internal issue Apple needs to workout. Clicking back to System Preferences and navigating forward again seems to fix the issue._\n\n   ![Sysext](assets/sysext.png)\n   ![Allow](assets/allow.png)\n\n3. You will need to enable Full Disk Access for the system extension.\n\n   ![FullDisk](assets/fulldisk.png)\n\n---\n\n## Requirements\n\nCrescendo is only compatible with \u003e=10.15.X and at least Xcode 10.\n\n---\n\n## Components\n\nThis project consists of three main components:\n\n1. A system extension (CrescendoExtension)\n2. A Framework wrapper around the Endpoint Security Framework (Crescendo)\n3. An app for viewing events in a nice little user interface (CrescendoApp)\n\n---\n\n## Testing and Development\n\nIt is _highly_ recommended to test this code in a virtual machine with SIP disabled, since this project requires the endpoint-security entitlement, TCC, and proper signing when SIP is enabled.\n\n1. Boot into Recovery mode on macOS\n2. Disable SIP and AMFI\n\n```\ncsrutil disable\nnvram boot-args=\"amfi_get_out_of_my_way=0x1\"\n```\n\n3. Reboot\n4. Enable developer mode so our extensions will reload everytime we call `OSSystemExtensionManager.shared.s",
  "github_repo": "SuprHackerSteve/Crescendo",
  "github_stars": 1078,
  "github_topics": [
    "endpointsecurity",
    "macos",
    "swift"
  ],
  "homepage": "https://github.com/SuprHackerSteve/Crescendo",
  "homepage_og_description": null,
  "homepage_og_image": null,
  "homepage_title": null,
  "installs_30d": 3,
  "installs_365d": 57,
  "installs_90d": 6,
  "last_seen": "2026-06-20T00:47:34+00:00",
  "llm_generated_at": null,
  "llm_model": null,
  "names": [
    "Crescendo"
  ],
  "one_liner": null,
  "rank_30d": 6898,
  "rank_365d": 5482,
  "rank_90d": 7273,
  "raw_hash": "605aaeec08410d59",
  "ruby_source_path": "Casks/c/crescendo.rb",
  "tap": "homebrew/cask",
  "token": "crescendo",
  "version": "1.0.4",
  "why_use_this": null
}