github.com/livingstonetech/providence (go): Kernel based auditing for Mac, BSD and Linux. Leverages the Audit Subsystem, OpenBSM (eventually) and Apple's Endpoint Security Framework
Keywords: endpointsecurityframework|kernel-auditing|nix