GitHub - cixel/osascript-audit: small wrapper around the macos osascript binary for snooping on what scripts jamf is trying to run :(

cixel / osascript-audit Public

Notifications You must be signed in to change notification settings
Fork 0
Star 1

small wrapper around the macos osascript binary for snooping on what scripts jamf is trying to run :(

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 3 Commits
README		README
audit.go		audit.go
go.mod		go.mod

Repository files navigation

Small wrapper around `osascript`.
Logs all use of osascript to `/usr/local/var/log/osascript-audit.log`, because jamf tried to use it for something and that spooked me.

To use:

```
go build -o /usr/local/bin/osascript
```

Ensure your `$PATH` sets `/usr/local/bin` before `/usr/bin`.
Anything invoking `osascript` by name, and not by path, will call the wrapper in `/usr/local/bin` instead of the default.