clawdstrike

Clawdstrike is a robust policy engine and endpoint detection and response (EDR) tool designed for advanced security management, featuring a signed audit chain that records a wide array of system events. It integrates seamlessly with diverse environments, offering a Rust crate, TypeScript SDK, Python package, and CLI functionality, while ensuring policy evaluations are both comprehensive and consistently audited. Notable features include support for varying platforms (macOS, Linux), a formal verification mechanism for policy consistency, and a fail-closed design principle that enhances security posture.