Hello, Thanks a lot for your answer, it's working well now. I wondering if it is a safe method to do it because I read about anonymous connection in the documentation that can avoid man-in-the-middle attack on named connection. Can you tell me if their is a possible man-in-the-middle attack on the connection that I describe before? Thank you

Hi, Thanks a lot for your answer. But what did you mean by "an app-like-package", I don't really understand. I create a new Xcode project with the macOS App template, I remove all the file as you mentioned then I create a new file in the target to contain my extension (a C file). I added the ES entitlement and all the library needed to use the ES API. The project can be build and run but I got this error : 2021-06-25 11:24:08.438374+0200 ESDeamon[15713:718214] Failed to open service: -536870174 2021-06-25 11:24:08.441585+0200 ESDeamon[15713:718214] Failed to create new ES client: 4 The debug section shows me that the result of the es_new_client function return an error whereas I test with the notify-demo.c taken from the WWDC2020 example of build an Endpoint Security App. I guess I am missing something but I don't really know what. Can you explain to me the step to create an ES deamon that can manage Notify Events. Johan