Santa GUI

The Santa GUI process is pretty simple. It’s only job is the display user GUI notifications. There are two types of notifications it can display:

A notification when an execve() is blocked.

Notifications when specific rules arrive (when using FCM for push notifications).