blockblock ☆
« Back to VersTracker
Description:
Monitors common persistence locations
Type: Cask  |  Latest Version: 2.3.0@0  |  Tracked Since: Dec 17, 2025
Links: Homepage  |  @objective_see  |  formulae.brew.sh
Category: Security
Tags: security monitoring macos malware persistence defense
Install: brew install --cask blockblock
About:
BlockBlock is a real-time monitoring tool that watches common persistence locations on macOS to detect and block unauthorized modifications. It alerts users when malware attempts to install persistence mechanisms like launch agents or cron jobs. This provides an essential layer of defense against sophisticated threats that survive reboots.
Key Features:
  • Real-time monitoring of persistence locations
  • Alerts on unauthorized modifications
  • Blocks malicious persistence attempts
  • Lightweight background operation
  • Detailed logging of events
Use Cases:
  • Detecting malware persistence mechanisms
  • Monitoring system integrity changes
  • Investigating suspicious system behavior
Alternatives:
  • KnockKnock – KnockKnock scans for existing persistence mechanisms while BlockBlock actively monitors and blocks in real-time
  • Little Snitch – Little Snitch focuses on network traffic monitoring while BlockBlock monitors file system persistence locations
Version History
Detected Version Rev Change Commit
Feb 16, 2026 6:52am 2.3.0 0 VERSION_BUMP f01e5e96
Aug 5, 2025 2:16pm 2.2.5 0 VERSION_BUMP f69346ca
« Back to VersTracker  |  Browse Packages  |  About