cmdReporter macOS security audit and log parsing Add-on

cmdReporter is a security monitoring tool for macOS. cmdReporter collects and continually streams the data IT security teams need, to the logging and SIEM tools they already use. The purpose of this add-on is to add additional value and sorting to cmdReporter's macOS security, audit, and operational logs. This is done by making the logs CIM compliant, adding tagging for Enterprise Security data models, and other knowledge objects to make searching and visualizing this data easy. Additional Information about cmdReporter https://www.cmdsec.com/cmdreporter cmdReporter (agent) supports macOS Versions: 10.8 - 10.15+ *Note:* All screenshots are cmdReporter data in Splunk's InfoSec application to demonstrate CIM compliance. InfoSec application available here: https://splunkbase.splunk.com/app/4240/ Collected and parsed data types include: - OpenBSM audit logs - Apple Unified Logs - macOS configuration changes - Hardware add/remove events - Network connections - Gatekeeper and XProtect logs - File event monitoring