@Ome Kor: Bedankt voor de link!
Genoemd in het artikel, de
website van Howard Oakley, voor diepgaande info over dit en nog veel meer andere macOS-internal onderwerpen.
Howard Oakley at Eclectic Light Company has a nice page about what happens when the XProtect Remediator runs.
Oakley also has a note from 2022 about changes Apple made to XProtect - and which malware it scans for, although the list is by no means exhaustive.