How do I check in terminal XProtect and MRT versions running Big Sur?

[camelia]

Hello,

in macOS Mojave and Catalina entering this commands in terminal I can check the version of Gatekeeper, XProtect, and MRT
Which is the new path in macOS Big Sur to check them or How do I check if I have installed the latest versions?
Is Gatekeeper still present in macOS Big Sur?

$ /usr/libexec/PlistBuddy -c "Print CFBundleShortVersionString" /private/var/db/gkopaque.bundle/Contents/Info.plist
$ defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString
$ defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString

Thanks @tywebb13 @bogdanw
Camelia

Ps: You can send me a private message if you feel more comfortable helping me with this quesions

 

[AMacisforlife]

There's a 3rd part app called SilentKnight which may be of help.

SilentKnight, Skint, silnite, LockRattler, SystHist & Scrub

Skint – a watchful eye on security settings Updated! Checks key security settings and features including SIP, SSV, Gatekeeper, XProtect, XProtect Remediator and macOS security updates. Runs a…

eclecticlight.co

 

[NC_Bulldog]

Hello,

in macOS Mojave and Catalina entering this commands in terminal I can check the version of Gatekeeper, XProtect, and MRT
Which is the new path in macOS Big Sur to check them or How do I check if I have installed the latest versions?
Is Gatekeeper still present in macOS Big Sur?

Rather than using Terminal commands you might try the free app SilentKnight which displays all the Gatekeeper, Xprotect, etc. versions currently installed, and shows what the latest versions are. It also allows the user to install the latest versions using the app.

SilentKnight, Skint, silnite, LockRattler, SystHist & Scrub

Skint – a watchful eye on security settings Updated! Checks key security settings and features including SIP, SSV, Gatekeeper, XProtect, XProtect Remediator and macOS security updates. Runs a…

eclecticlight.co

 

[camelia]

There's a 3rd part app called SilentKnight which may be of help.

SilentKnight, Skint, silnite, LockRattler, SystHist & Scrub

Skint – a watchful eye on security settings Updated! Checks key security settings and features including SIP, SSV, Gatekeeper, XProtect, XProtect Remediator and macOS security updates. Runs a…

eclecticlight.co

I know this app very well, and I frequently visit the website

Rather than using Terminal commands you might try the free app SilentKnight which displays all the Gatekeeper, Xprotect, etc. versions currently installed, and shows what the latest versions are. It also allows the user to install the latest versions using the app.

SilentKnight, Skint, silnite, LockRattler, SystHist & Scrub

Skint – a watchful eye on security settings Updated! Checks key security settings and features including SIP, SSV, Gatekeeper, XProtect, XProtect Remediator and macOS security updates. Runs a…

eclecticlight.co

Listen, I want to learn, I want to know, how to check manually (Using Terminal commands) Gatekeeper, Xprotect, ect. versions.

Isn't a crime when you try to learn something new right?

Thanks
Camelia

 

[AMacisforlife]

I know this app very well, and I frequently visit the website

Listen, I want to learn, I want to know, how to check manually (Using Terminal commands) Gatekeeper, Xprotect, ect. versions.

I think Apple keep detailed information about Gatekeeper, XProtect, and MRT close to their chest as clearly they cover very sensitive areas within macOS. Maybe if you email SilentKnight's author via the website we've discussed, you may get some more information. I've found him very helpful when I've contacted him about other issues.

 

[camelia]

Since this information is NASA protected for some users I can confirm this terminal commands works in Big Sur

Last login: Fri Sep 24 05:21:16 on consolee

Gatekeeper
$ /usr/libexec/PlistBuddy -c "Print CFBundleShortVersionString" /private/var/db/gkopaque.bundle/Contents/Info.plist
181

XProtect            
$ defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString
2151

MRT (Malware Removal Tool)  
$ defaults read /Library/Apple/System/Library/CoreServices/MRT.app/Contents/Info.plist CFBundleShortVersionString
1.84

I hope FBI doesn't want me to put in jail since I am sharing this "sensitive information"

🙄

Camelia

 

[allan.nyholm]

@camelia thanks for sharing your findings.

 

[Hombre53]

I use Silent Knight all the time. Great way to check if those "other files" (XProtect, Gatekeeper, MRT, TCC, Kext, EFI, et all are being updated by Apple. Great program!

 

[camelia]

I use Silent Knight all the time. Great way to check if those "other files" (XProtect, Gatekeeper, MRT, TCC, Kext, EFI, et all are being updated by Apple. Great program!

But do you know How to check TCC, Kext, EFI, et all are being updated by Apple using terminal commands?

Knowledge is power, my friend 👊

Camelia

 

[Hombre53]

Using terminal is great, if you know the commands. Since Silentknight is so straightforward and simple, I use it nearly everyday to keep an eye on potential updates. I love “simple”.