objective-see / KnockKnock

Enumerate persistently installed software
GNU General Public License v3.0
454 stars 34 forks source link

Background Managed Tasks incomplete #27

Open 7c opened 11 months ago

7c commented 11 months ago

First of all, i love your Apps! I want to support by contributing to stability.

I have been notified that a new software was added to the background items from my laptop; i checked and saw at "Allow in the Background" section inside Settings:

image

then i gathered information inside KnockKnock and could not find a match. then i have called the tool sfltool dumpbtm to see background items and their properties

and saw:

image

for some reason my "Allow in the Background" location showed single entry, KnockKnock did not detect any and this software was uninstalled long time ago, i have no clue who has added this entries, still in research...

But can we maybe add "sfltool" as kind of helper for KnockKnock ?

best regards

objective-see commented 11 months ago

Thank you for the report. Can you make sure you're running the lastest version of KnockKnock: https://github.com/objective-see/KnockKnock/releases/download/v2.5.0/KnockKnock_2.5.0.zip

It has a "Background Task Management" plugin now, so should this (and other) such items.

7c commented 11 months ago

image

image

i was using latest version already. If you want me to do other stuff (also technical) let me know please.

7c commented 4 weeks ago

Same issue with all these items, my latest version macbook background items show "Rewind" item:

 #36:
                 UUID: C2CBF5CE-23F8-4AE3-8A22-769AFF82915A
                 Name: Rewind AI Inc.
       Developer Name: Rewind AI Inc.
                 Type: developer (0x20)
          Disposition: [disabled, allowed, visible, not notified] (2)
           Identifier: Rewind AI Inc.
                  URL: (null)
           Generation: 2

 #37:
                 UUID: A8E3C360-96F1-4C2E-B0E3-AF2293C3FE69
                 Name: Limitless
       Developer Name: Rewind AI Inc.
      Team Identifier: NFYJ9X64B5
                 Type: legacy agent (0x10008)
          Disposition: [enabled, disallowed, visible, notified] (9)
           Identifier: Limitless
                  URL: file:///Users/xxxxxx/Library/LaunchAgents/Limitless.plist
      Executable Path: /Applications/Limitless.app/Contents/MacOS/Limitless
           Generation: 2
    Parent Identifier: Rewind AI Inc.

 #38:
                 UUID: E14A0FAB-9728-4850-84EC-75B0E6C82C3C
                 Name: Rewind
       Developer Name: Rewind AI Inc.
      Team Identifier: NFYJ9X64B5
                 Type: legacy agent (0x10008)
          Disposition: [enabled, disallowed, visible, notified] (9)
           Identifier: com.rewind.Rewind
                  URL: file:///Users/xxxxxx/Library/LaunchAgents/com.rewind.Rewind.plist
      Executable Path: /Applications/Rewind.app/Contents/MacOS/Rewind
           Generation: 2
    Parent Identifier: Rewind AI Inc.

bit neither the UI nor the exported kkResults.txt mention about these