SilentKnight, Skint, silnite, LockRattler, SystHist & Scrub

Skint – a watchful eye on security settings

skint1051
Updated! Checks key security settings and features including SIP, SSV, Gatekeeper, XProtect, XProtect Remediator and macOS security updates. Runs automatically every 24 hours showing green/amber/red and any issues. Doesn’t check Apple’s software update servers, and tolerant of Macs running older versions of macOS. Includes a full Help book. Update adds changing Dock icons, Run Checks command, fixes a significant bug, and more.
Skint 1.05 (Universal App for Monterey, Ventura and Sonoma only)

SilentKnight – fully automatic checks of firmware and security systems

sk221
Updated! Check whether your Mac is up to date automatically. Covers firmware, security settings and data files, and now checks macOS malware scans. Has both a summary Help page and a detailed reference. Update guards better against inadvertent macOS installs.
SilentKnight 1.21 (Universal App for El Capitan, Sierra, High Sierra, Mojave, Catalina, Big Sur, Monterey and Ventura) – last version to run on El Capitan to Mojave
SilentKnight 2.7 (Universal App for Catalina, Big Sur, Monterey, Ventura and Sonoma)

`silnite` – a command tool to perform the same checks as SilentKnight

If you’re managing Macs on a network, this is an invaluable way of checking EFI firmware, security settings including SIP and FileVault, and security data file updates. A choice of two levels of detail, which can include checks against my database of current versions, and reports to stdout in text, JSONised XML or proper JSON. Can also download and install waiting updates. Update adds Studio Display firmware checks and more.
silnite 6 (Universal binary for El Capitan, Sierra, High Sierra, Mojave, Catalina, Big Sur and Monterey)
silnite 7 (Universal binary for El Capitan, Sierra, High Sierra, Mojave, Catalina, Big Sur, Monterey and Ventura)
silnite 9 (Universal binary for El Capitan, Sierra, High Sierra, Mojave, Catalina, Big Sur, Monterey and Ventura)
silnite 10 (Universal binary for Big Sur, Monterey, Ventura and Sonoma)

LockRattler – a quick check of your security systems

lockrat352
Updated! LockRattler checks your Mac’s basic security systems are active, reports version numbers of security configuration files which are active, the latest updates installed, and makes it easy to check for and install updates. Ideal for checking that SIP is enabled, and it has Apple’s latest silent security updates. Update fixes a crashing bug on non-T2 Intel Macs.
LockRattler 4.32 (Universal App for El Capitan, Sierra, High Sierra, Mojave, Catalina, Big Sur and Monterey) – last version to support log privacy checks
LockRattler 4.35 (Universal App for El Capitan, Sierra, High Sierra, Mojave, Catalina, Big Sur, Monterey and Ventura) – last version to run on El Capitan and Sierra
LockRattler 4.37 (Universal App for High Sierra, Mojave, Catalina, Big Sur, Monterey and Ventura)

SystHist – lists full system and security update installation history

systhist1181
Updated! SystHist is a clean and simple app which tells you all the OS X/macOS system and security updates which have been installed on that Mac. Now probes deep into protected territory to find even silent silent updates, and gives details of all the files updated. Update adds support for Sonoma.
SystHist 1.17 (Universal App for El Capitan, Sierra, High Sierra, Mojave, Catalina, Big Sur and Monterey)
SystHist 1.19 (Universal App for High Sierra, Mojave, Catalina, Big Sur, Monterey, Ventura and Sonoma)

Scrub – cleans folders and volumes of potentially leaking sensitive data

scrub131
Scrub clears extended attributes which can show when a file was downloaded, and where from; old versions; turns off Spotlight indexing; clears the QuickLook cache; can even set all file dates to 1970. These greatly limit the forensic footprint of your most sensitive files. Powerful, so please read the docs carefully before use. Update improves handling of xattrs.
Scrub 1.1 (Intel-only for El Capitan, Sierra, High Sierra, Mojave and Catalina)
Scrub 1.2 (Universal App for El Capitan, Sierra, High Sierra, Mojave, Catalina and Big Sur)
Scrub 1.3 (Universal App for High Sierra, Mojave, Catalina, Big Sur, Monterey, Ventura and Sonoma)

Further details:

How to deal with XProtect Remediator (XPR) problems
Skint and SkintM 1.05 are almost feature-complete
Keep a more watchful eye on your Mac with Skint 1.04
Skint version 1.03 fixes bugs that could give false negatives
Troubleshooting your Mac’s security with Skint 1.02
Skint 1.01 fixes SSV checks on Macs with multiple boot systems
Skint will keep a quiet eye on your Mac’s key settings
Inside SilentKnight: how it works
Which system software and security updates were installed? SystHist now supports Sonoma
SilentKnight 2.7 is more tolerant of error
SilentKnight 2.6 supports Sonoma and more
More app updates: SearchKey and SearchKeyLite 1.5, and Scrub 1.3
SystHist 1.18 now reports RSRs
SilentKnight 2.5 and XProCheck 1.5 are better focussed
SilentKnight 2.4 improves XProtect Remediator reporting
Getting the most from SilentKnight: a tutorial
SilentKnight 2.3 fixes a bug and aids custom workflows
SilentKnight 2.2 helps you avoid unintended updates, and copes with failed installs
When SIP status is unknown, SilentKnight and silnite can be foxed
silnite version 8 generates proper JSON output
SilentKnight version 2 is designed for Catalina to Ventura
What does SilentKnight check and why?
LockRattler 4.35 now checks for XProtect Remediator
SilentKnight and SystHist updates now check XProtect Remediator
Updates for Ventura and M2 Macs: SilentKnight, LockRattler and SystHist
LockRattler version 4.33 now reports Studio Display firmware version
Updating your Mac using softwareupdate, SilentKnight and silnite
Things that go bump in SilentKnight: serious security failures
Using SilentKnight to download updates
SilentKnight: how to install just one update, rather than all
New versions of LockRattler and SystHist are now available
Why is my Mac’s Gatekeeper data so out of date?
SilentKnight and LockRattler: A Masterclass
SilentKnight, LockRattler and silnite: which should you use?
Achieving the CIS Apple macOS 10.15 Benchmark

Some apps break LockRattler’s update features

SystHist lists your Mac’s information about installed updates, which may in many cases not exactly match the version of macOS which it’s currently running. To help you see this more clearly, version 1.9 and later display the running version of macOS, so there’s no doubt.

How should security data updates work?
Does your Mac keep installing the same MRT updates?
Scrub is now a Universal App, and fixes crashes with QuickLook
Scrub version 1.1 shouldn’t crash on Catalina

Why is my system update history wrong?

How to check your Mac is secure
Some Macs don’t update their firmware when they should
How can security data get so out of date?
How do you get a security update to work?
What happened when MRT was updated, and what MRT does
Why does SilentKnight/LockRattler show TCC is out of date?
What is this ‘Compatibility Notification Data’ which Apple has just updated?
Apple has added a new security database to Catalina, bringing 3 updates
SilentKnight, LockRattler and silnite updates to extend 10.15 checks
SilentKnight and silnite now look at firmware more thoroughly