Crumbl0x
Expert Member
- Joined
- Mar 18, 2020
- Messages
- 1,147
- Reaction score
- 681
Ahh, gotcha! I thought you tied the exact same behaviour to the other systems, but thank you for clarifying, you're most certainly right on that point.What I meant was that your kernel logs contain this information on just about any system. You can quickly track when what was launched or killed by which user with a perfect timeline etc.
The information is already there, it's just not being sent anywhere.
I wouldn't be surprised if this is specifically gathering data in preparation of the Apple Silicon Macs launching, that would actually make a whole lot of sense. It would explain the need for it to bypass VPN's and Firewalls somewhat.