09 · Logging & Detection
macOS Logging and Detection: Unified Log and Endpoint Security
Use the macOS unified log, Endpoint Security, eslogger, sysdiagnose, osquery and Santa to gain visibility and detect suspicious activity on Macs.
Read
Florian Amette
Security engineer writing practical, benchmark-aligned macOS hardening guides for admins and security teams managing Mac fleets.
08 · MDM & Configuration Profiles
MDM and Configuration Profiles for Mac Hardening
How MDM, Automated Device Enrollment, supervision, configuration profiles and Declarative Device Management fit together to enforce a macOS security baseline.
Read
07 · Updates & Patching
macOS Software Updates: Patching Macs Fast and Reliably
How to keep macOS patched: softwareupdate CLI, automatic update settings, Background Security Improvements, DDM enforcement, deferrals and third-party apps.
Read
03 · App Execution Control
Gatekeeper, XProtect and Notarization on macOS
How Gatekeeper, quarantine, code signing, notarization and XProtect decide what runs on a Mac, how to verify them, and how to manage them with MDM and Santa.
Read
11 · Lockdown & High-Risk Users
Lockdown Mode on macOS: Protecting High-Risk Users
What Lockdown Mode restricts on macOS, how to enable it, how it affects MDM, and the companion controls high-risk users need, from ADP to security keys.
Read
02 · Platform Integrity
System Integrity Protection and the Signed System Volume
What SIP and the Signed System Volume protect on macOS, how to verify them, why they stay on in production, and how system extensions replace kernel extensions.
Read
01 · Disk Encryption & Boot
FileVault on Apple Silicon: Encryption, Keys and Boot Security
How FileVault really works on Apple silicon and T2 Macs, how to enable and escrow recovery keys with fdesetup and MDM, and how to lock down startup security.
Read
10 · Benchmarks & Compliance
mSCP and CIS Benchmarks: macOS Compliance Baselines
How to use the NIST macOS Security Compliance Project and CIS Apple macOS Benchmarks to build, tailor, deploy and continuously verify a Mac baseline.
Read
06 · Privacy & TCC
macOS TCC Privacy Permissions: Audit, Reset and PPPC
How macOS TCC protects Full Disk Access, Screen Recording, Accessibility and more, and how to audit, reset and manage grants with PPPC profiles.
Read
05 · Accounts & Privileges
macOS Accounts, sudo and Least Privilege: Hardening Guide
Run macOS as a standard user, harden sudoers, enable Touch ID for sudo safely, disable guest and auto-login, and enforce password and screen lock policy.
Read
04 · Network & Firewall
macOS Firewall and pf: Application Firewall, pf and Sharing
Harden macOS networking with the Application Firewall, pf packet filter rules, disabled sharing services and managed encrypted DNS profiles.
Read