Objective-See has some nice free security tools too: https://objective-see.com/products.html

Some useful ones are “OverSight” (gives notifications when the webcam or microphone is activated) and “BlockBlock” (prompts with an allow/deny whenever a piece of software tries to install a launchagent/launchdaemon/kext, as well as “KnockKnock” which generates a one-shot report of all kinds of startup items.

filter malicious hosts using the hosts file

Please stop telling people to do this. It’s very inefficient and often problematic