if any one sees like the following messages on 11.M.N of Xcode --error: attach by name 'processname' failed -- Problems with launching via XPC. XPC error : Connection interruptedYou know that the process had a crash in your prior debug session.Until I reboot the machine, I can not re-attach to the same process -- what a bummer :-(

Neither the link to sample code ( mentioned in a reply) nor the X12.0 beta has the template for EP sec Api use. Can someone confirm this ? Thanks, Prokash

Thanks much Eskimo ! I was able to compile using Xcode beta 3 and 4 of 12.0 I'm not sure if the App that embeds the extension should be in Application folder, if so is it /Applications ?? When I try to launch under Xcode, I'm able to see in the UI the launching is successful. BUT SEE signature problem. Not sure why though !. When I check the signature psinha@Prokash.Sinha:~/GITS/MonitoringSystemEventsWithEndpointSecurity/Build/Products/Debug$ codesign -dvvvv com.example.apple-samplecode.SampleEndpointApp.Extension.systemextension/ Executable=/Users/psinha/GITS/MonitoringSystemEventsWithEndpointSecurity/Build/Products/Debug/com.example.apple-samplecode.SampleEndpointApp.Extension.systemextension/Contents/MacOS/com.example.apple-samplecode.SampleEndpointApp.Extension Identifier=com.example.apple-samplecode.SampleEndpointApp.Extension Format=bundle with Mach-O thin (x86_64) CodeDirectory v=20500 size=772 flags=0x10000(runtime) hashes=14+5 location=embedded VersionPlatform=1 VersionMin=659200 VersionSDK=720896 Hash type=sha256 size=32 CandidateCDHash sha256=c093346dc496a58da0bc8f61450b972d8819ca6d CandidateCDHashFull sha256=c093346dc496a58da0bc8f61450b972d8819ca6d29de431d3e6c4c9c1a52ca01 Hash choices=sha256 CMSDigest=c093346dc496a58da0bc8f61450b972d8819ca6d29de431d3e6c4c9c1a52ca01 CMSDigestType=2 Page size=4096 CDHash=c093346dc496a58da0bc8f61450b972d8819ca6d Signature size=4739 Authority=Apple Development: Prokash Sinha (XQ47TT249Y) Authority=Apple Worldwide Developer Relations Certification Authority Authority=Apple Root CA Signed Time=Aug 6, 2020 at 12:06:27 PM Info.plist entries=22 TeamIdentifier=C489D5E8E8 Runtime Version=11.0.0 Sealed Resources version=2 rules=13 files=1 Internal requirements count=1 size=220

Ideally I would be happy if I could get the DAEMON ( that I can install using launchctl ) working with SIP enabled. After registering ( it become silent ). Hope this one is working for someone ( with SIP enabled )

Nevemind.... All working fine

Only relevant log is application.com.apple.mail.1152921500311908095.1152921500311908100[69680]): Service exited with abnormal code: 1

Thanks much Eskimo, as usual... Le'me go thru all what U stated, and ref: Appreciate it much ! -P

BY the way, I'm trying this using C API interface ( no Obj-C tho ). We will have a launchctl based EP Security client, which we tested and seem to work fine ( note that we don not want any app related stuff, like canvas, delegates etc. ). At the start we will have a communication dylib that is going to field XPC based communication I mentioned here. This is gong to be C and C++. XPC module could stay as C module. Hope it does not create more problems !! -P

Nevermind, returning the pointer created to the class from return statement was actually the problem!!!