Well, on 10.15 the user is able to manually approve installation of unnotarized apps, basically overriding this requirement. Will it be same for 11.0? Thanks

Thanks for the assistance, it seems that when I added the IPC connection call, it started working and I can see logs from the extension.

Thank you friend, this works great 🙂

Thanks for the assistance Uddalak, unfortunately this does not work. The ES_EVENT_TYPE_AUTH_CREATE does not trigger when deleting a file via the Finder UI.I have also tried many other events and did not manage to trigger it.@Eskimo - is there any other way to achieve this?Thank you!

Thanks 🙂 I was moving to trash via the Finder UI thinking that should trigger the event.In that case, is there a way to allow/deny moving a file? (so that deleting via Finder UI would be caught)Couldn't find such an event.