Scanner FAQs

Question 1

What types of security issues does Scanner detect?

Accepted Answer

It detects unsigned or invalidly signed binaries, processes running from unusual locations (e.g., `/tmp`), non-standard network port usage, deleted executables, and more, categorizing them by severity (HIGH/MEDIUM/LOW).

Question 2

Can I integrate Scanner with other tools?

Accepted Answer

Absolutely. Besides its comprehensive CLI, Scanner also operates as an MCP server, making it compatible with MCP clients like Claude Code for broader security workflows and automation.

Question 3

What is Scanner for macOS?

Accepted Answer

Scanner is a powerful security tool designed for post-incident investigation on macOS, identifying and flagging suspicious process activity, network connections, and code signing issues with severity-ranked explanations.

Question 4

Does Scanner offer network analysis capabilities?

Accepted Answer

Yes, Scanner can analyze network connections, highlighting external IP addresses to help identify unusual or unauthorized outbound communications from your macOS system.

Scanner

主要功能

使用案例

Scanner

主要功能

使用案例