maccrab

Drive the MacCrab macOS threat-detection engine from an agent session — query alerts/events/campaigns/traces, hunt threats, and (when the human has enabled the matching capability tier) tune detection, author rules, and adjust defense-affecting config. Use when asked to inspect this Mac's security posture, triage MacCrab alerts, write or tune detection rules, or change MacCrab settings.