Skip to content

Releases: objective-see/KnockKnock

Version 4.0.3

18 Dec 05:44

Choose a tag to compare

You can now sponsor KnockKnock/Objective-See Foundation:

KnockKnock v4.0.3

β˜‘οΈ UI improvements

β˜‘οΈ Improved BTM enumeration (#23)

β˜‘οΈ Set checkbox(s) initial state in "Submit to VirusTotal" window to off (#46)

πŸ” KnockKnock_4.0.3.zip
SHA-1: B08C2362F7E9EABA684E83EA3A2777B486EAD4DC

Version 4.0.2

17 Dec 02:27

Choose a tag to compare

You can now sponsor KnockKnock/Objective-See Foundation:

KnockKnock v4.0.2

β˜‘οΈ Refactored/Improved 'Compare Scan(s)' logic (#45)

πŸ” KnockKnock_4.0.2.zip
SHA-1: FDB0D904DFA760659EC0089B0C455A9F220FBC3B

Version 4.0.1

15 Dec 21:43

Choose a tag to compare

You can now sponsor KnockKnock/Objective-See Foundation:

KnockKnock v4.0.1

β˜‘οΈ Improved JSON exports

β˜‘οΈ Improved UI (Settings)

πŸ” KnockKnock_4.0.1.zip
SHA-1: A00C96A2CA6A7B2A35D344585A4368BA4B5B525B

Version 4.0.0

14 Dec 22:20

Choose a tag to compare

You can now sponsor KnockKnock/Objective-See Foundation:

KnockKnock v4.0.0

β˜‘οΈ New Feature: "Start at Login"
Once activated, KnockKnock will be automatically started, and perform a scan at each login.

β˜‘οΈ New Plugin: Shell Configuration Files
Shell configuration files such as ~/.zshrc are parsed each time the shell starts, and any commands they contain are automatically executed. Malware is known to add extra commands to these files to maintain persistence via the shell, which now KnockKnock will display.

β˜‘οΈ New "Welcome to KnockKnock" screens for initial configuration
On initial launch, KnockKnock will show a configuration screen(s) that lets you choose how it should run. All of these settings can be changed later in the app’s settings:

β˜‘οΈ Update to VirusTotal v3 API
Updated VirusTotal integration. User's can now specify their own (free!) VT key #31, #39, #17
(See more info on obtaining a free key from VT, see "Please give me an API key").

β˜‘οΈ Improved command line scan
Myriad of improvements to both CLI scan logic, but also scan output. Special mahalo to Martin!

β˜‘οΈ Improved menus to better match macOS Guidelines #9

β˜‘οΈ Improved Full Disk Access check

β˜‘οΈ Better suggested name for (JSON) output #42

β˜‘οΈ Whitelisted Apple's (SIP-protected) tmp_cleaner script #40

β˜‘οΈ Improved "Unrecognized Items" (by VT) window

πŸ” KnockKnock_4.0.0.zip
SHA-1: 06387DC135C16E41682BC97B8B497CD65B0FB05D

Version 3.9.8

13 Dec 22:19

Choose a tag to compare

Version 3.9.8 Pre-release
Pre-release

πŸ†• You can now sponsor KnockKnock/Objective-See Foundation:

KnockKnock v3.9.8 (Pre-release for v4.0.0)

β˜‘οΈ Improved CLI output

β˜‘οΈ Improved Full Disk Access check

Full Changelog: v3.9.7...v3.9.8

Version 3.9.7

12 Dec 02:34

Choose a tag to compare

Version 3.9.7 Pre-release
Pre-release

πŸ†• You can now sponsor KnockKnock/Objective-See Foundation:

KnockKnock v3.9.7 (Pre-release for v4.0.0)

β˜‘οΈ Improved Results window

β˜‘οΈ Improved 'Shell Configuration Files' plugin

v3.9.6

11 Dec 06:56

Choose a tag to compare

v3.9.6 Pre-release
Pre-release

πŸ†• You can now sponsor KnockKnock/Objective-See Foundation:

KnockKnock v3.9.6 (Pre-release for v4.0.0)

ℹ️ This is a pre-release with a lot of new code / features!
Please report any issues/bugs that I'll fix ASAP, and will then get KnockKnock v4.0 released shortly! Mahalo πŸ™πŸ½

β˜‘οΈ New Feature: "Start at Login"
Once activated, KnockKnock will be automatically started, and perform a scan, at each login

β˜‘οΈ New Plugin: Shell Configuration Files

β˜‘οΈ Improved "Unrecognized Items" (by VT) window

Version 3.9.5 (Pre-release for v4.0.0)

07 Dec 22:57

Choose a tag to compare

Pre-release

πŸ†• You can now sponsor KnockKnock/Objective-See Foundation:

KnockKnock v3.9.5 (Pre-release for v4.0.0)

ℹ️ This is a pre-release with a lot of new code / features! Please report any issues/bugs that I'll fix ASAP, and will then get KnockKnock v4.0 released shortly! Mahalo πŸ™πŸ½

β˜‘οΈ New "Welcome to KnockKnock" screens for initial configuration

β˜‘οΈ Improved request/detection for Full Disk Access (FDA)

β˜‘οΈ Update to VirusTotal v3 API

β˜‘οΈ With public VirusTotal key revoked (by VT), user's can now specify their own (free!) VT key #31, #39, #17
(See more info on obtaining a free key from VT, see "Please give me an API key")

β˜‘οΈ Improved menus to better match macOS Guidelines #9

β˜‘οΈ Better suggested name for (JSON) output #42

β˜‘οΈ Whitelisted Apple's (SIP-protected) tmp_cleaner script #40

β˜‘οΈ Improved "Unrecognized Items" (by VT) window

v3.1.0

05 Jan 01:32

Choose a tag to compare

⌨️ Keyboard shortcuts
πŸ”Ž New UI for items that aren't recognized by VirusTotal

Version 3.0.1

12 Dec 18:19

Choose a tag to compare

πŸ› Bug fixes (e.g. #34)
πŸ‘πŸΌ (minor) UI improvements