# MacOSThreatTrack | Bash Tool Used For Proactive Detection Of Malicious Activity On macOS Systems

**URL:** <https://onehack.st/t/macosthreattrack-bash-tool-used-for-proactive-detection-of-malicious-activity-on-macos-systems/234278>\
**Category:** Tools & Scripts\
**Tags:** tools, tips-tricks, pc-optimization\
**Created:** [March 11, 2023, 1:13pm UTC](https://onehack.st/t/macosthreattrack-bash-tool-used-for-proactive-detection-of-malicious-activity-on-macos-systems/234278 "2023-03-11T13:13:58Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\
**Post date:** [March 11, 2023, 1:13pm UTC](https://onehack.st/t/macosthreattrack-bash-tool-used-for-proactive-detection-of-malicious-activity-on-macos-systems/234278/1 "2023-03-11T13:13:59Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/b/7/b714125718e10ac0678f80cd9d00abf6a8b427cb.jpeg)

# MacOS ThreatTrack

> The tool is being tested in the beta phase, and it only gathers MacOS system information at this time.

> The code is poorly organized and requires significant improvements.

## Description

Bash tool used for proactive detection of malicious activity on macOS systems.

I was inspired by [Venator-Swift](https://github.com/richiercyrus/Venator-Swift) and decided to create a bash version of the tool.

## OneLiner command

curl [https://raw.githubusercontent.com/ab2pentest/MacOSThreatTrack/main/MacOSThreatTrack.sh](https://raw.githubusercontent.com/ab2pentest/MacOSThreatTrack/main/MacOSThreatTrack.sh) | bash

## Gathered information

```auto
[+] System info
[+] Users list
[+] Environment variables
[+] Process list
[+] Active network connections
[+] SIP status
[+] GateKeeper status
[+] Zsh history
[+] Bash history
[+] Shell startup scripts
[+] PF rules
[+] Periodic scripts
[+] CronJobs list
[+] LaunchDaemons data
[+] Kernel extensions
[+] Installed applications
[+] Installation history
[+] Chrome extensions

```

## Todo

1. Saving output as JSON instead of printing out the result.

## GitHub:

> **[GitHub - ab2pentest/MacOSThreatTrack: Bash tool used for proactive detection of...](https://github.com/ab2pentest/MacOSThreatTrack)**
>
> Bash tool used for proactive detection of malicious activity on macOS systems.