Anti-forensic macOS tray application designed to safeguard your system by monitoring USB ports. It ensures your device's security by automatically initiating either a system shutdown or hibernation if an unauthorized device connects or a connected device is unplugged. It offers the flexibility to whitelist designated devices, to select an action to be executed and to set a countdown timer, allowing to disarm the shutdown process.
- Monitoring: Continuously monitors USB ports for device activity, even in sleep mode.
- Whitelisting: Allows users to whitelist authorized devices, ensuring hassle-free connectivity.
- Discrete: Operates in the macOS system tray, minimizing interruptions.
- Customizable: Allows users to configure various settings, including action (shutdown/hibernate), countdown timer and whitelist.
- Lightweight: Designed to consume minimal system resources for optimal performance.
- Privacy: Does not require an internet connection, ensuring the privacy of your data.
- Open Source: Provides transparency and allows community contributions for continuous development.
Left: Manipulation button to defuse the alarm. Right: Whitelist and Settings menu.
A few reasons to use this tool:
- Anti-Forensic Measures: In case the police or other thugs break in. The police often use a mouse jiggler to prevent the screen saver or sleep mode from being activated.
- Prevent Data Exfiltration: You do not want someone adding or copying documents to or from your computer via USB.
- Public Environments: If you frequently use your Mac in public places like libraries or cafes, swiftGuard acts as an additional layer of security against physical attacks in a potentially vulnerable setting.
- Server Protection: You want to improve the security of your home or company server (e.g. your Raspberry Pi, NAS, etc.).
- Data Protection Regulations: Many industries and organizations are subject to strict data protection regulations. swiftGuard helps maintain compliance by preventing unauthorized data transfers and access through USB ports.
Tip: You might also want to use a cord to attach a USB key to your wrist. Then plug the key into your computer and
run swiftGuard. If your computer is robbed, the USB is removed and the computer shuts down immediately.
- Bluetooth: If a Bluetooth Device (tries to) connect(s), or if a new Bt Device comes near you MacBook, swiftGuard will shutdown/hibernate.
- More Actions: When it detects a Manipulation swiftGuard is able to delete or encrypt files/folders, wipe ram, send an email notification, ...)
- Custom Actions: You can define custom shell/python commands to be executed, e.g., run a script.
- Linux Support: Cross-platform support.
- Encryption: More security on top, with password protected configuration and defusing.
- Auto Start/Update: I think this one is clear.
Visit the GitHub Repository to explore the code, contribute to development, or download the latest release.