objective-see.org
BlockBlock is a macOS security tool that monitors common persistence locations and alerts whenever a new persistent component is added. It uses Apple's Endpoint Security Framework, requires system privileges and Full Disk Access, and runs automatically after restart to provide continual protection. Alerts identify the responsible process and the persisted item, and users can allow or block it.