WindowManager Screen Recording Purple dot appears on application changes

Barring a more full disclosure of when is running on this computer via the usage of Etrecheck application and posting the report

when this issue in occurring

Open the Activity Monitor application

Make sure to use View >> View All Processes 

What process or processes are using the Most CPU  and Memory.

When I examined the " WindowsManager" process

In the below, I see various open files directly tied to WindowsManager process

The Last entry is of interest.

It seems related to Allow which could be related to Allowing a Process or possible Allowing a Third Party Device access to say a Microphone ?

/System/Library/CoreServices/WindowManager.app/Contents/MacOS/WindowManager

/Library/Preferences/Logging/.plist-cache.XaUpS1n5

/usr/share/icu/icudt74l.dat

/System/Library/Frameworks/Foundation.framework/Versions/C/Resources/FoundationErrors.loctable

/System/Library/CoreServices/WindowManager.app/Contents/Resources/InfoPlist.loctable

/System/Library/CoreServices/SystemVersion.bundle/English.lproj/SystemVersion.strings

/System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/SystemAppearance.car

/System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/Aqua.car

/System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/FauxVibrantLight.car

/System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/VibrantLight.car

/System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Resources/AppleKeyboardLayouts-L.dat

/System/Library/Caches/com.apple.IntlDataCache.le.kbdx

/System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Resources/InfoPlist.loctable

/private/var/db/analyticsd/events.allowlist

Use Control Center on Mac

Privacy indicators, which can be dots or arrows, are located to the right of Control Center. An orange dot  next to the Control Center icon  in the menu bar indicates the microphone on your Mac is in use; a green dot  indicates a camera is in use; a purple dot ➡️  indicates the system audio is being recorded; and an arrow  ⬅️ indicates your location is in use. Only one privacy indicator dot is shown at a time. For example, if both the microphone and a camera are in use, you see only a green dot.

Allogarage wrote:

I think it's when you quit or switch application with Stage Manager enabled.

It is used to make a snapshot of the app, don't you think ?

Apple may removed this annoying alert, you could think you have a spyware installed that record your screen ...

Adware or Malware generally do not just appear on the computer

It would require Expressed Permission given by the user to Install on the computer

That could only be grated by the User to have Manually Entered the User Account Password

Spyware ?

Lockdown Mode is an optional, extreme protection that’s designed for the very few individuals who, because of who they are or what they do, might be personally targeted by some of the most sophisticated digital threats. Most people are never targeted by attacks of this nature.

So I dare say, unless the user is a High Value Target - doubtful it is spyware

Currently in safe mode, can confirm it still happens.

Also checked the running process for WindowManager, seems to be a MacOS Core Service. Force quitting the process does nothing, it just starts up again.

I hope Apple releases a fix for this soon 🥲

Of course, you can't use your mac without Window Manager - that is, literally, what you manages your windows, or more generally, the user interface.

I don't know why you have it screen recording, though. It's a mystery.

I think it's when you quit or switch application with Stage Manager enabled.

It is used to make a snapshot of the app, don't you think ?

Apple may removed this annoying alert, you could think you have a spyware installed that record your screen ...

The same here. Just switching between apps results in a WindowManager screen recording. WTF?

MacOS 15.0.1 (24A348)

I'd appreciate an answer to this one, too. It may well be innocent, but there seems to be no obvious reason for this to occur.

This is only a Best Guess. so take it with a Pinch of Salt

Windows Tilling

External Link

https://www.macrumors.com/2024/06/12/macos-sequoia-window-tiling/

Does this also happen when in Safe Mode? If not, it suggests that some third party software is causing this to happen.