Table of Contents
XProtect, which is also called File Quarantine, is an anti-malware programme on your Mac that uses YARA signatures to find malware. Remember that XProtect is a built-in tool that came out with Mac OS X 10.6 Snow Leopard in 2009, Check XProtect Version on Mac. When you open an app or file downloaded through the File Quarantine-aware app, XProtect usually checks for viruses.
Mac has several defences against malware that keep your system safe from major malware attacks. In addition to Gatekeeper, Apple comes with XProtect, which stops malware from getting into your Mac.
You need to learn more about XProtect to understand what it can do to keep viruses from attacking your computer. This post talks about how to turn on, turn off, and access the current version of XProtect.
Steps to Check XProtect Version on Mac
- Open the Terminal application (found in /Applications/Utilities/) and enter the following command string on a single line to read the contents
- The XProtect plist and export the version number:
- system_profiler SPInstallHistoryDataType | grep -A 5 “XProtectPlistConfigData”
- Check XProtect for MacOS High Sierra (10.13.x) and Sierra (10.12.x):
- defaults read /System/Library/CoreServices/XProtect.bundle/Contents/Resources/XProtect.meta.plist Version
- Hit return key and you will see something like the following, which indicates the vision number of Xprotect as well
- The source and when the install date of that Xprotect version was:
- XProtectPlistConfigData:
- Optionally, you can trigger a manual update of the xprotect and Gatekeeper software update mechanism in Mac OS
Checking When XProtect was Last Updated
- Another useful trick is to check when the malware definition list of Xprotect plist file(s) were last modified either with stat or ls:
- stat /System/Library/CoreServices/XProtect.bundle/Contents/Resources/XProtect.plist
- Or you can check with ls -l:
- ls -l /System/Library/CoreServices/XProtect.bundle/Contents/Resources/XProtect.plist
- Either will show the last modification date of the Xprotect.plist file, which will tell you when it was last updated.
FAQ
How do I know what version of XProtect I have?
- On the failover recording server,
- Right-click the Milestone Failover Recording Server service icon.
- Select About.
- A small dialog box opens that shows the exact version of your Failover Recording Server service.
How do I access XProtect?
If an XProtect Mobile server is installed on the computer you are using, you can right-click the Mobile Server Manager tray icon in the notification area and choose Open XProtect Web Client. You can use a browser to get to an XProtect Mobile server if you are not using the computer where it is installed.
How do I check for spyware on my Mac?
To get to the Activity Monitor, open Spotlight Search by pressing Command + Spacebar. Then, press Enter after typing Activity Monitor. Look over the list to see if there is anything you don’t know. Double-click on a programme or process and then click “Quit” to end it.
Do all Macs come with XProtect?
Since 2009, all Macs come with XProtect, which is Apple’s own antivirus software. XProtect checks all applications and files for viruses and malware by using a database of threats that Apple updates every day.