I'm interested in knowing how to monitor and possibly sandbox an app and its relative background processes in MacOS. Is there some internal utility hidden somewhere in the system tools (even CLI), or maybe some tool from the web? I cannot find anything about this. Furthermore, it looks like everyone still thinks Mac OS cannot get malware and it is not helping.
Let's say I want to install an Android Emulator to play android games on my MacBook. I know that the majority of the emulators are Chinese, therefore I will expect a significant amount of telemetry. I decide to go with the app Mumu. During the installation, the app asks me to input my password to allow the creation of a new Helper (anyway, what is it and what does that even entail?). In order to do this and continue with the installation, I have to allow the (initially blocked) execution of a "system software", in Security & Privacy >> General (pic).
If I ever decided to play along, how could I monitor the effects of this choice? Can any app with these privileges access any other app data? In particular, I am interested in keeping these safe:
- browser history (eg. chrome, firefox...)
- files all around my disk (duh... )
What is safe and what is not? How can I know (in real-time possibly) what a specific service/process/app with granted privileges is doing to my computer?
Thanks in advance