Santa is a binary whitelisting/blacklisting system for Mac OS. It consists of a kernel extension that monitors for executions, a userland daemon that makes the execution based on the contents of a SQLite database, a GUI agent that notifies the user in case of a block decision, and a command-line utility for managing the system and synchronizing the database with a server.