linux knock_如何查看您的Mac在使用Knock引导时加载的内容

linux knock

If you’re a Mac power user, you probably install a lot of software, only to delete it later. But how many of those applications, drivers, and customizations tools are still trying to do things when your Mac starts up?

如果您是Mac的高级用户，则可能安装了很多软件，只是稍后再删除它。 但是，当Mac启动时，有多少应用程序，驱动程序和自定义工具仍在尝试执行操作？

If you’re like me, you have no idea, which is why it’s good that KnockKnock exists. This free program gives you an overview of all persistent software on your Mac, basically everything that starts up when your Mac does. The information goes well beyond what you can see in System Preferences, and is presented clearly in a single user interface. It’s useful for spotting malware, and also for doing some spring cleaning.

如果您像我，就不知道，这就是为什么KnockKnock存在的原因。 这个免费的程序为您提供了Mac上所有持久性软件的概述，基本上是Mac上启动的所有软件。 这些信息远远超出了您在“系统偏好设置”中看到的范围，并且在单个用户界面中清楚地显示。 这对于发现恶意软件以及进行Spring大扫除很有用。

KnockKnock is from Objective See, a trusted member of the macOS security community behind a variety of security tools, including one we recommended for finding out when your Mac’s camera is active. Installing is simple: just download the ZIP file, click it to unzip it, and then drag the icon to your Applications folder.

KnockKnock来自Objective See ，它是macOS安全社区中值得信赖的成员，其背后是多种安全工具，其中包括我们建议使用的一种工具，用于确定Mac摄像机何时处于活动状态 。 安装很简单：只需下载ZIP文件，单击将其解压缩，然后将图标拖到“应用程序”文件夹中即可。

Launch KnockKnock and you’ll see a simple user interface. Click the “Start Scan” button to begin.

启动KnockKnock，您将看到一个简单的用户界面。 单击“开始扫描”按钮开始。

You will be asked for your password.

系统将要求您输入密码。

The scan itself shouldn’t take more than a minute or two.

扫描本身不应超过一两分钟。

When the scan is done, you can start browsing the results, which are broken down into sections.

扫描完成后，您可以开始浏览结果，并将结果分为几部分。

For example, there’s the macOS extensions section, which includes tools that give applications the ability to integrate with Finder, Notifications Center, and more. You’ll see the name of the extension and its location in your file system, alongside information from VirusTotal.

例如，存在macOS扩展部分，其中包括使应用程序能够与Finder，Notifications Center等集成的工具。 您将看到扩展名及其在文件系统中的位置，以及来自VirusTotal的信息。

This means that, at a glance, you’ll know what something is, where it lives on your computer, and if it’s likely to be malware. You’ll also see buttons for pulling up more information, and opening a Finder window to the file’s location.

这意味着您一眼就能知道什么是东西，它在计算机上的位置以及是否有可能是恶意软件。 您还将看到用于拉出更多信息以及打开Finder窗口到文件位置的按钮。

It’s a lot more information than you get from System Preferences, and you can use this same approach to see your macOS login items.

与从“系统偏好设置”中获得的信息相比，它提供了更多信息，并且您可以使用相同的方法来查看macOS登录项 。

But we’re just getting started. What really makes KnockKnock useful are the more advanced categories, like “Kernel Extensions.”

但是我们才刚刚开始。 真正使KnockKnock有用的是更高级的类别，例如“内核扩展”。

Kernel extensions are software that interfaces with the operating system at the kernel level, and it’s not a good idea to leave anything here unless it’s necessary.

内核扩展是在内核级别与操作系统交互的软件，除非有必要，否则不要在此处放置任何内容。

The locks beside the listings are important to note. To quickly break things down:

清单旁边的锁很重要。 快速分解：

• A green lock means something is signed by Apple itself. You’ll only see these if you specifically include OS items in the preferences.
  绿色锁表示某些东西已由Apple自己签名。 仅当您在首选项中明确包含OS项目时，您才会看到这些内容。
• A black closed lock means something is third party, but properly signed.
  黑色的闭合锁表示某些东西是第三方的，但已正确签名。
• An orange open lock means something is unsigned.
  橙色的打开锁表示未签名。

For example, in the above screenshot, you can see that my Wireless360Controller extension (an XBox 360 driver) is unsigned, meaning I probably shouldn’t keep it around. Happily I can locate the driver in the Finder and delete the kernel extension.

例如，在上面的屏幕截图中，您可以看到我的Wireless360Controller扩展名(XBox 360驱动程序)是未签名的，这意味着我可能不应该保留它。 幸运的是，我可以在Finder中找到驱动程序并删除内核扩展。

It goes without saying that deleting kernel extensions isn’t a good idea if you don’t know what you’re doing, because you could break things. But for informed Mac power users, KnockKnock gives you a way to check what your Mac is running at boot.

不用说，如果您不知道自己在做什么，则删除内核扩展不是一个好主意，因为您可能会破坏事情。 但是对于有经验的Mac高级用户，KnockKnock提供了一种在启动时检查Mac正在运行的方法。

This is a great tool for anyone who wants to learn more about the software running on their Mac, and also gives you one more way to stay on top of the growing Mac malware threat.

对于想要了解有关Mac上运行的软件的更多信息的人来说，这是一个很好的工具，它还为您提供了一种应对日益增长的Mac恶意软件威胁的方法 。

翻译自: https://www.howtogeek.com/336576/see-what-your-mac-is-loading-at-boot/

linux knock