If you liked the concept of EES, you may want to try GEARS from OPSWAT. GEARS Client enumerates running processes and queries the Metascan Online database for prior scan results of the binaries corresponding to the hashes. Any unknown hashes are uploaded for scanning by 40 antimalware engines. Based on the results (infection found / no infection found) GEARS will set a value that can be read by Host Checker via a registry/process check. GEARS supports both Mac and Windows endpoints. A guide to configure Host Checker to check for GEARS scan results is https://gears.opswat.com/integration/secure-access and attached.
