Inventory & Hardening

List the printers configured on this Mac — each one's status, where it connects, the default printer, and any jobs waiting in the print queue. A stuck queue is cleared with cancel_print_jobs; an old printer is removed with remove_printer. Documents sitting in a queue are waiting to print.

List the modern system extensions installed on this Mac — network filters, endpoint-security agents and drivers, the things VPNs, firewalls and security products install on recent macOS. These are separate from legacy kernel extensions, and a network extension you don't recognise can see your traffic.

List the network file servers this Mac is currently attached to — mounted SMB, AFP, NFS or WebDAV shares with the server, share name and mount point. Files saved into these live on the server, not this Mac.

Report this Mac's network locations, which is active, and the service order — which connection macOS prefers when several are live. An unexpected extra location or a re-ordered service list can silently change how your traffic flows.

Check whether this Mac's name reveals the owner's real identity — the name is broadcast to everyone nearby via AirDrop and Personal Hotspot and shown on every network it joins, so a real name is a privacy tell in public places.

Audit the command search path for hijack surface — world-writable, wrongly-owned, relative or dangling folders where an attacker could plant a command that shadows real tools (a fake 'sudo' that steals your password is the classic).

Scan the app bundles in your Applications folders for ones any user or process can modify — a writable app bundle lets malware replace the app's code so it runs with that app's permissions next launch. Permissions only; no file contents are read.

Check Apple Mail's rules for the two patterns attackers abuse: a rule that runs a script when matching mail arrives, or one that silently auto-forwards your mail to another address. Reads rule names only — never any mail contents.

Report whether this Mac has a usable Touch ID sensor, how many fingerprints are enrolled, and whether Touch ID can unlock the Mac. Desktops without a Touch ID keyboard report that honestly.

Report the password policy on this account — whether a custom policy (usually from an employer or MDM profile) constrains login passwords, and the minimum length. Reads the policy rules only, never a password.

List certificates in your keychain that are expired or expiring within 30 days — names and dates only, never any private-key material. Expired certificates cause 'connection is not private' errors and failed signing.

List this Mac's audio inputs and outputs — built-in, USB, Bluetooth, HDMI — with which are the current defaults. Useful when sound comes out of the wrong device or a mic isn't recognised; inputs are microphones worth knowing about.

Rename this Mac — sets the display name shown by AirDrop, Personal Hotspot and networks, plus the matching network hostname. The privacy fix when the name leaks the owner's identity.

Remove one configured printer and its queue from this Mac — the cleanup for an old, duplicate or unrecognised printer.

Cancel the waiting jobs in the print queue — all queues, or just one printer's. The fix for a stuck queue, or for documents queued by mistake that shouldn't print.

Turn firewall stealth mode on or off — stealth makes this Mac ignore pings and probe attempts so port scanners see nothing, without changing the rest of the firewall. Turning it off restores ping replies for troubleshooting.