KnockKnock
brew install --cask knockknock
v4.0.3
Displays all persistent software, startup items, and kernel extensions installed on your Mac.
Why you might care
KnockKnock reveals hidden or suspicious software that auto-starts with your system—useful for security audits or malware detection. It's free and from Objective-See, a trusted macOS security researcher, giving you clear visibility into what's running before you run it.
546
30-day installs · #446
1.6k
90-day · #459
4.9k
365-day · #493
Links
- https://objective-see.org/products/knockknock.html
- Brew formula source: Casks/k/knockknock.rb
Blurb generated by claude-haiku-4-5 on today.
Raw metadata
{
"alternatives": [
"Activity Monitor",
"Autoruns",
"Little Snitch"
],
"artifacts": [
{
"app": [
"KnockKnock.app"
],
"target": "/Applications/KnockKnock.app"
},
{
"zap": [
{
"trash": [
"~/Library/Caches/com.objective-see.KnockKnock",
"~/Library/Preferences/com.objective-see.KnockKnock.plist",
"~/Library/Saved Application State/com.objective-see.KnockKnock.savedState"
]
}
]
}
],
"auto_updates": null,
"categories": [
"security",
"system-utility",
"monitoring"
],
"deprecated": 0,
"deprecation_reason": null,
"desc": "Tool to show what is persistently installed on the computer",
"disable_reason": null,
"disabled": 0,
"display_name": "KnockKnock",
"enrichment_fetched_at": "2026-06-20T22:45:37+00:00",
"first_seen": "2026-06-20T00:47:34+00:00",
"full_token": "knockknock",
"github_default_branch": null,
"github_last_commit_at": null,
"github_readme_excerpt": null,
"github_repo": null,
"github_stars": null,
"github_topics": [],
"homepage": "https://objective-see.org/products/knockknock.html",
"homepage_og_description": null,
"homepage_og_image": "https://objective-see.com/images/KK/kk.png",
"homepage_title": "Objective-See: KnockKnock",
"installs_30d": 546,
"installs_365d": 4910,
"installs_90d": 1595,
"last_seen": "2026-06-20T00:47:34+00:00",
"llm_generated_at": "2026-06-20T23:04:15+00:00",
"llm_model": "claude-haiku-4-5",
"names": [
"KnockKnock"
],
"one_liner": "Displays all persistent software, startup items, and kernel extensions installed on your Mac.",
"rank_30d": 446,
"rank_365d": 493,
"rank_90d": 459,
"raw_hash": "259bdd864b2bd8b0",
"ruby_source_path": "Casks/k/knockknock.rb",
"tap": "homebrew/cask",
"token": "knockknock",
"version": "4.0.3",
"why_use_this": "KnockKnock reveals hidden or suspicious software that auto-starts with your system\u2014useful for security audits or malware detection. It\u0027s free and from Objective-See, a trusted macOS security researcher, giving you clear visibility into what\u0027s running before you run it."
}