{"id":27865460,"url":"https://github.com/rommelfs/alod","last_synced_at":"2025-10-17T23:31:41.627Z","repository":{"id":143321559,"uuid":"101415939","full_name":"rommelfs/ALOD","owner":"rommelfs","description":"automatic launch object detection for Mac OS X","archived":false,"fork":false,"pushed_at":"2017-08-25T15:35:00.000Z","size":45,"stargazers_count":6,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-05-04T21:29:13.459Z","etag":null,"topics":["deprecated","osx","raw","security-tools"],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rommelfs.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"License.rtf","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2017-08-25T15:12:54.000Z","updated_at":"2025-03-18T00:39:44.000Z","dependencies_parsed_at":"2023-05-14T13:45:28.191Z","dependency_job_id":null,"html_url":"https://github.com/rommelfs/ALOD","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/rommelfs/ALOD","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rommelfs%2FALOD","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rommelfs%2FALOD/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rommelfs%2FALOD/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rommelfs%2FALOD/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rommelfs","download_url":"https://codeload.github.com/rommelfs/ALOD/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rommelfs%2FALOD/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":262893637,"owners_count":23380710,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["deprecated","osx","raw","security-tools"],"created_at":"2025-05-04T21:25:13.041Z","updated_at":"2025-10-17T23:31:41.573Z","avatar_url":"https://github.com/rommelfs.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# ALOD\nautomatic launch object detection for Mac OS X - doesn't seem to work on latest version of OS X.\nFor complete information about this project please be referred to https://www.circl.lu/pub/tr-08/\n\n\n## Abstract\n\nCurrent Mac OS X malware often persists and automatically starts by using the built-in launch system 1. This tool makes use of Automatic Folder Actions 2 in order to create a very basic but effective way of monitoring the addition of new launch objects to standard locations. In case a new object is placed in one of the monitored directories, a pop-up informs the user about the change, who then has in turn to decide if the change was legitimate or not. The new version is also monitoring locations where plug-ins are installed, for instance for common Internet browsers. The list of locations is displayed below. Besides displaying added files, this tool can also set up a log file where changes are recorded.\n\n## Mode of operation\n\nThe tools enables Automatic Folder Actions on the system and monitors the following locations (depending if the respective software is installed):\n\n~~~\n/Library/LaunchAgents\n/Library/LaunchDaemons\n/System/Library/LaunchAgents\n/System/Library/LaunchDaemons\n~/Library/LaunchAgent\n/Library/StartupItems\n/System/Library/StartupItems\n/Library/Internet Plug-Ins\n~/Library/Safari/Extensions\n~/Library/Application Support/Google/Chrome/Default/Extensions\n~/Library/Application Support/Opera/widgets\n~/Library/Internet Plug-Ins\n~/Library/Containers/com.operasoftware.Opera/Data/Library/Internet Plug-Ins\n~/Library/Containers/com.operasoftware.Opera/Data/Library/Application Support/Opera/widgets\n~~~\n\nIf there is a file/folder added to any of theses locations, a notification script (which is included and copied to the User’s ‘Folder Actions Scripts’ folder) is executed which points to the change.\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frommelfs%2Falod","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frommelfs%2Falod","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frommelfs%2Falod/lists"}