HN Reader

a lightweight macOS detection agent that taps into Santa’s Endpoint Security telemetry, runs CEL detection rules locally on-device, and only ships high-signal alerts to a tiny backend. basically a poor man’s macOS EDR for home labs and small fleets!