Comment by ReligiousFlames

VMware Fusion userland & kexts to see how they intercept IOKit USB connections.