IsSIPProtected
A constraint that tests whether a code file or process is on a volume protected by System Integrity Protection (SIP).
Declaration
struct IsSIPProtectedOverview
When you use this constraint to test a running process, it tests whether the process’s main executable is SIP-protected.