A way to test System Integrity Protection SIP (NOT about how to enable/disable)?

When I first began using 10.11 El Capitan I had to disable SIP in order to run some stuff, and to avoid some crashes. The crashes were probably likely down to some kext I had leftover from older software installations, etc. Not sure.

Is there a way short of enabling SIP to test to see if I have impermissible kexts or anything else in the protected areas that will gag the machine? I don't really wanna go through tons of booting iterations in the hopes of finding things that hang or crash the machine.

To rephrase, this is not about how to enable or disable SIP, but how to programatically or automate a test to determine status of SIP.

Solution 1:

I know you can check whether SIP is on or off in terminal with this command:

csrutil status

I think you might be looking for a more detailed analysis though.