macOS / binaries /

XProtect

/Library/Apple/System/Library/CoreServices/XProtect.app/Contents/MacOS/XProtect
Automatically detects and blocks the execution of known malware.

macOS includes built-in antivirus technology called **XProtect88 for the signature-based detection and removal of malware. The system uses YARA signatures, a tool used to conduct signature-based detection of malware, which Apple updates regularly.

The binary is a part of XProtect application.