Where Does KnockKnock Store Scans on Mac?
Where KnockKnock keeps scan snapshots and trust decisions on Mac for review and full moves.
Last updated
KnockKnock scans persistence locations with results stored under the Objective-See vendor folder: snapshots plus trust decisions for known Apple and third party items. A helper tool gathers what the app displays.
Save snapshots before system updates to diff later; updates shuffle persistence legitimately. The helper reinstalls per Mac and permissions never travel with files. Reach Library through Go to Folder.
Where KnockKnock stores this, by platform
~/Library/Application Support/Objective-See/KnockKnock
Snapshots and trust decisions under the vendor folder in Library. Helper reinstalls per Mac. Save snapshots before updates to diff later.
Frequently asked questions
How do I move KnockKnock data to a new Mac?
Copy the Objective-See data folder with scans closed, then reinstall the helper on the new Mac. Snapshots travel in files; the helper needs a fresh install. Re-grant Full Disk Access after restoring.
How do I compare scans over time?
Open KnockKnock and run a fresh scan; the UI lists every persistent item with signing state. Snapshots save through the file menu for comparing. The list always reflects the live system.
Notice an outdated path? Let us know.