search

redcanaryco / mac-monitor

Red Canary Mac Monitor is an advanced, stand-alone system monitoring tool tailor-made for macOS security research. Beginning with Endpoint Security (ES), it collects and enriches system events, displaying them graphically, with an expansive feature set designed to reduce noise.
938 stars 46 forks source link

Speedbump on Clear button #10

Closed AndrewMohawk closed 1 year ago

AndrewMohawk commented 1 year ago

At a high level -- can you summarize your request? I occasionally accidentally hit clear and lose all my captured data. It would be nice if this had a "Are you sure?" dialog

What is the current alternative solution? Avoid clicking Clear!

Are there "In-the-Wild" threats or corresponding ATT&CK techniques that exist for which this telemetry would be helpful? N/A

Brandon7CC commented 1 year ago

GREAT idea! 😆 I've done the same

Brandon7CC commented 1 year ago

@AndrewMohawk same w/"⌘+q"? Similar to Google Chrome we can ask to confirm before quit.

AndrewMohawk commented 1 year ago

Yeah, any real speedbump to stop me from accidentally clearing my data since I seem to regularly hit the buttons on either side! (even just moving clear would work for me!). Perhaps the button could also be a little more descriptive, when I first used it I assumed it cleared my filters!

Brandon7CC commented 1 year ago

Implemented in v1.0.4 thank you for the excellent suggestion Andrew! More good stuff to come :)