{"action":"created","comment":{"url":"https://api.github.com/repos/google/santa/pulls/comments/133772295","pull_request_review_id":56984010,"id":133772295,"diff_hunk":"@@ -0,0 +1,61 @@\n+# Mode\n+\n+Santa can run in one of two modes, Lockdown or Monitor. To check the current status run the following command:\n+\n+```sh\n+⇒  santactl status\n+>>> Daemon Info\n+  Mode                      | Monitor\n+  File Logging              | Yes\n+  Watchdog CPU Events       | 0  (Peak: 13.59%)\n+  Watchdog RAM Events       | 0  (Peak: 31.49MB)\n+>>> Kernel Info\n+  Kernel cache count        | 107\n+>>> Database Info\n+  Binary Rules              | 5\n+  Certificate Rules         | 2\n+  Events Pending Upload     | 0\n+>>> Sync Info\n+  Sync Server               | https://sync-server-hostname.com\n+  Clean Sync Required       | No\n+  Last Successful Full Sync | 2017/08/02 21:44:17 -0400\n+  Last Successful Rule Sync | 2017/08/02 21:44:17 -0400\n+  Push Notifications        | Connected\n+  Bundle Scanning           | Yes\n+```\n+\n+##### Monitor mode\n+\n+The default mode. Running Santa in Monitor Mode will stop all binaries matching blacklist rules, but will not stop unknown binaries from running. This is a flexible state, allowing virtually zero user interruption but still gives protection against known blacklisted binaries. In addition execution events that would have been blocked in Lockdown mode are generated and can be collected and analyzed by a sync server.","path":"Docs/details/mode.md","position":null,"original_position":29,"commit_id":"98bde28c4f48b3b260f43061ab2891f1c8bba2e4","original_commit_id":"7c867a74639d2570d7e8cfee6d112003ce663a79","user":{"login":"tburgin","id":2117646,"avatar_url":"https://avatars2.githubusercontent.com/u/2117646?v=4","gravatar_id":"","url":"https://api.github.com/users/tburgin","html_url":"https://github.com/tburgin","followers_url":"https://api.github.com/users/tburgin/followers","following_url":"https://api.github.com/users/tburgin/following{/other_user}","gists_url":"https://api.github.com/users/tburgin/gists{/gist_id}","starred_url":"https://api.github.com/users/tburgin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tburgin/subscriptions","organizations_url":"https://api.github.com/users/tburgin/orgs","repos_url":"https://api.github.com/users/tburgin/repos","events_url":"https://api.github.com/users/tburgin/events{/privacy}","received_events_url":"https://api.github.com/users/tburgin/received_events","type":"User","site_admin":false},"body":"Done","created_at":"2017-08-17T17:06:48Z","updated_at":"2017-08-17T17:34:06Z","html_url":"https://github.com/google/santa/pull/192#discussion_r133772295","pull_request_url":"https://api.github.com/repos/google/santa/pulls/192","_links":{"self":{"href":"https://api.github.com/repos/google/santa/pulls/comments/133772295"},"html":{"href":"https://github.com/google/santa/pull/192#discussion_r133772295"},"pull_request":{"href":"https://api.github.com/repos/google/santa/pulls/192"}}},"pull_request":{"url":"https://api.github.com/repos/google/santa/pulls/192","id":135375327,"html_url":"https://github.com/google/santa/pull/192","diff_url":"https://github.com/google/santa/pull/192.diff","patch_url":"https://github.com/google/santa/pull/192.patch","issue_url":"https://api.github.com/repos/google/santa/issues/192","number":192,"state":"open","locked":false,"title":"Docs: Start of Santa Docs","user":{"login":"tburgin","id":2117646,"avatar_url":"https://avatars2.githubusercontent.com/u/2117646?v=4","gravatar_id":"","url":"https://api.github.com/users/tburgin","html_url":"https://github.com/tburgin","followers_url":"https://api.github.com/users/tburgin/followers","following_url":"https://api.github.com/users/tburgin/following{/other_user}","gists_url":"https://api.github.com/users/tburgin/gists{/gist_id}","starred_url":"https://api.github.com/users/tburgin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tburgin/subscriptions","organizations_url":"https://api.github.com/users/tburgin/orgs","repos_url":"https://api.github.com/users/tburgin/repos","events_url":"https://api.github.com/users/tburgin/events{/privacy}","received_events_url":"https://api.github.com/users/tburgin/received_events","type":"User","site_admin":false},"body":"The start of Santa Docs\r\n\r\n**What is good**\r\n* Provides a framework of topics to cover\r\n* Most documents have a lot of good detail\r\n* Read the docs support\r\n\r\n**What is not good**\r\n* Some docs need more detail\r\n* More diagrams are needed\r\n* More examples of the syncing API are needed","created_at":"2017-08-11T16:45:17Z","updated_at":"2017-08-17T17:34:06Z","closed_at":null,"merged_at":null,"merge_commit_sha":"43f2db918fe3459ea20fda62c94d75ca1b3da201","assignee":null,"assignees":[],"requested_reviewers":[],"milestone":null,"commits_url":"https://api.github.com/repos/google/santa/pulls/192/commits","review_comments_url":"https://api.github.com/repos/google/santa/pulls/192/comments","review_comment_url":"https://api.github.com/repos/google/santa/pulls/comments{/number}","comments_url":"https://api.github.com/repos/google/santa/issues/192/comments","statuses_url":"https://api.github.com/repos/google/santa/statuses/98bde28c4f48b3b260f43061ab2891f1c8bba2e4","head":{"label":"tburgin:docs","ref":"docs","sha":"98bde28c4f48b3b260f43061ab2891f1c8bba2e4","user":{"login":"tburgin","id":2117646,"avatar_url":"https://avatars2.githubusercontent.com/u/2117646?v=4","gravatar_id":"","url":"https://api.github.com/users/tburgin","html_url":"https://github.com/tburgin","followers_url":"https://api.github.com/users/tburgin/followers","following_url":"https://api.github.com/users/tburgin/following{/other_user}","gists_url":"https://api.github.com/users/tburgin/gists{/gist_id}","starred_url":"https://api.github.com/users/tburgin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tburgin/subscriptions","organizations_url":"https://api.github.com/users/tburgin/orgs","repos_url":"https://api.github.com/users/tburgin/repos","events_url":"https://api.github.com/users/tburgin/events{/privacy}","received_events_url":"https://api.github.com/users/tburgin/received_events","type":"User","site_admin":false},"repo":{"id":66392950,"name":"santa","full_name":"tburgin/santa","owner":{"login":"tburgin","id":2117646,"avatar_url":"https://avatars2.githubusercontent.com/u/2117646?v=4","gravatar_id":"","url":"https://api.github.com/users/tburgin","html_url":"https://github.com/tburgin","followers_url":"https://api.github.com/users/tburgin/followers","following_url":"https://api.github.com/users/tburgin/following{/other_user}","gists_url":"https://api.github.com/users/tburgin/gists{/gist_id}","starred_url":"https://api.github.com/users/tburgin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tburgin/subscriptions","organizations_url":"https://api.github.com/users/tburgin/orgs","repos_url":"https://api.github.com/users/tburgin/repos","events_url":"https://api.github.com/users/tburgin/events{/privacy}","received_events_url":"https://api.github.com/users/tburgin/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/tburgin/santa","description":"A binary whitelisting/blacklisting system for Mac OS X","fork":true,"url":"https://api.github.com/repos/tburgin/santa","forks_url":"https://api.github.com/repos/tburgin/santa/forks","keys_url":"https://api.github.com/repos/tburgin/santa/keys{/key_id}","collaborators_url":"https://api.github.com/repos/tburgin/santa/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/tburgin/santa/teams","hooks_url":"https://api.github.com/repos/tburgin/santa/hooks","issue_events_url":"https://api.github.com/repos/tburgin/santa/issues/events{/number}","events_url":"https://api.github.com/repos/tburgin/santa/events","assignees_url":"https://api.github.com/repos/tburgin/santa/assignees{/user}","branches_url":"https://api.github.com/repos/tburgin/santa/branches{/branch}","tags_url":"https://api.github.com/repos/tburgin/santa/tags","blobs_url":"https://api.github.com/repos/tburgin/santa/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/tburgin/santa/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/tburgin/santa/git/refs{/sha}","trees_url":"https://api.github.com/repos/tburgin/santa/git/trees{/sha}","statuses_url":"https://api.github.com/repos/tburgin/santa/statuses/{sha}","languages_url":"https://api.github.com/repos/tburgin/santa/languages","stargazers_url":"https://api.github.com/repos/tburgin/santa/stargazers","contributors_url":"https://api.github.com/repos/tburgin/santa/contributors","subscribers_url":"https://api.github.com/repos/tburgin/santa/subscribers","subscription_url":"https://api.github.com/repos/tburgin/santa/subscription","commits_url":"https://api.github.com/repos/tburgin/santa/commits{/sha}","git_commits_url":"https://api.github.com/repos/tburgin/santa/git/commits{/sha}","comments_url":"https://api.github.com/repos/tburgin/santa/comments{/number}","issue_comment_url":"https://api.github.com/repos/tburgin/santa/issues/comments{/number}","contents_url":"https://api.github.com/repos/tburgin/santa/contents/{+path}","compare_url":"https://api.github.com/repos/tburgin/santa/compare/{base}...{head}","merges_url":"https://api.github.com/repos/tburgin/santa/merges","archive_url":"https://api.github.com/repos/tburgin/santa/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/tburgin/santa/downloads","issues_url":"https://api.github.com/repos/tburgin/santa/issues{/number}","pulls_url":"https://api.github.com/repos/tburgin/santa/pulls{/number}","milestones_url":"https://api.github.com/repos/tburgin/santa/milestones{/number}","notifications_url":"https://api.github.com/repos/tburgin/santa/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/tburgin/santa/labels{/name}","releases_url":"https://api.github.com/repos/tburgin/santa/releases{/id}","deployments_url":"https://api.github.com/repos/tburgin/santa/deployments","created_at":"2016-08-23T18:32:20Z","updated_at":"2016-08-23T18:32:22Z","pushed_at":"2017-08-17T17:31:35Z","git_url":"git://github.com/tburgin/santa.git","ssh_url":"git@github.com:tburgin/santa.git","clone_url":"https://github.com/tburgin/santa.git","svn_url":"https://github.com/tburgin/santa","homepage":"","size":1894,"stargazers_count":0,"watchers_count":0,"language":"Objective-C","has_issues":false,"has_projects":true,"has_downloads":false,"has_wiki":true,"has_pages":false,"forks_count":1,"mirror_url":null,"open_issues_count":0,"forks":1,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"google:master","ref":"master","sha":"0544011ee02f68e0782a76294b7e54d7062e47a5","user":{"login":"google","id":1342004,"avatar_url":"https://avatars1.githubusercontent.com/u/1342004?v=4","gravatar_id":"","url":"https://api.github.com/users/google","html_url":"https://github.com/google","followers_url":"https://api.github.com/users/google/followers","following_url":"https://api.github.com/users/google/following{/other_user}","gists_url":"https://api.github.com/users/google/gists{/gist_id}","starred_url":"https://api.github.com/users/google/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/google/subscriptions","organizations_url":"https://api.github.com/users/google/orgs","repos_url":"https://api.github.com/users/google/repos","events_url":"https://api.github.com/users/google/events{/privacy}","received_events_url":"https://api.github.com/users/google/received_events","type":"Organization","site_admin":false},"repo":{"id":25009012,"name":"santa","full_name":"google/santa","owner":{"login":"google","id":1342004,"avatar_url":"https://avatars1.githubusercontent.com/u/1342004?v=4","gravatar_id":"","url":"https://api.github.com/users/google","html_url":"https://github.com/google","followers_url":"https://api.github.com/users/google/followers","following_url":"https://api.github.com/users/google/following{/other_user}","gists_url":"https://api.github.com/users/google/gists{/gist_id}","starred_url":"https://api.github.com/users/google/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/google/subscriptions","organizations_url":"https://api.github.com/users/google/orgs","repos_url":"https://api.github.com/users/google/repos","events_url":"https://api.github.com/users/google/events{/privacy}","received_events_url":"https://api.github.com/users/google/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/google/santa","description":"A binary whitelisting/blacklisting system for Mac OS X","fork":false,"url":"https://api.github.com/repos/google/santa","forks_url":"https://api.github.com/repos/google/santa/forks","keys_url":"https://api.github.com/repos/google/santa/keys{/key_id}","collaborators_url":"https://api.github.com/repos/google/santa/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/google/santa/teams","hooks_url":"https://api.github.com/repos/google/santa/hooks","issue_events_url":"https://api.github.com/repos/google/santa/issues/events{/number}","events_url":"https://api.github.com/repos/google/santa/events","assignees_url":"https://api.github.com/repos/google/santa/assignees{/user}","branches_url":"https://api.github.com/repos/google/santa/branches{/branch}","tags_url":"https://api.github.com/repos/google/santa/tags","blobs_url":"https://api.github.com/repos/google/santa/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/google/santa/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/google/santa/git/refs{/sha}","trees_url":"https://api.github.com/repos/google/santa/git/trees{/sha}","statuses_url":"https://api.github.com/repos/google/santa/statuses/{sha}","languages_url":"https://api.github.com/repos/google/santa/languages","stargazers_url":"https://api.github.com/repos/google/santa/stargazers","contributors_url":"https://api.github.com/repos/google/santa/contributors","subscribers_url":"https://api.github.com/repos/google/santa/subscribers","subscription_url":"https://api.github.com/repos/google/santa/subscription","commits_url":"https://api.github.com/repos/google/santa/commits{/sha}","git_commits_url":"https://api.github.com/repos/google/santa/git/commits{/sha}","comments_url":"https://api.github.com/repos/google/santa/comments{/number}","issue_comment_url":"https://api.github.com/repos/google/santa/issues/comments{/number}","contents_url":"https://api.github.com/repos/google/santa/contents/{+path}","compare_url":"https://api.github.com/repos/google/santa/compare/{base}...{head}","merges_url":"https://api.github.com/repos/google/santa/merges","archive_url":"https://api.github.com/repos/google/santa/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/google/santa/downloads","issues_url":"https://api.github.com/repos/google/santa/issues{/number}","pulls_url":"https://api.github.com/repos/google/santa/pulls{/number}","milestones_url":"https://api.github.com/repos/google/santa/milestones{/number}","notifications_url":"https://api.github.com/repos/google/santa/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/google/santa/labels{/name}","releases_url":"https://api.github.com/repos/google/santa/releases{/id}","deployments_url":"https://api.github.com/repos/google/santa/deployments","created_at":"2014-10-09T21:18:31Z","updated_at":"2017-08-17T07:10:41Z","pushed_at":"2017-08-17T17:31:40Z","git_url":"git://github.com/google/santa.git","ssh_url":"git@github.com:google/santa.git","clone_url":"https://github.com/google/santa.git","svn_url":"https://github.com/google/santa","homepage":"","size":1694,"stargazers_count":1655,"watchers_count":1655,"language":"Objective-C","has_issues":true,"has_projects":true,"has_downloads":false,"has_wiki":true,"has_pages":false,"forks_count":125,"mirror_url":null,"open_issues_count":18,"forks":125,"open_issues":18,"watchers":1655,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/google/santa/pulls/192"},"html":{"href":"https://github.com/google/santa/pull/192"},"issue":{"href":"https://api.github.com/repos/google/santa/issues/192"},"comments":{"href":"https://api.github.com/repos/google/santa/issues/192/comments"},"review_comments":{"href":"https://api.github.com/repos/google/santa/pulls/192/comments"},"review_comment":{"href":"https://api.github.com/repos/google/santa/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/google/santa/pulls/192/commits"},"statuses":{"href":"https://api.github.com/repos/google/santa/statuses/98bde28c4f48b3b260f43061ab2891f1c8bba2e4"}}}}
{"actor":{"display_login":"tburgin"}}