How do I setup predicate for "Download" event in Jamf Protect?

it is better to raise case support. 

Hi 
Are you able to elaborate on the types of download you are trying to monitor? If you are looking to monitor Curl downloads, there are some analytics available in the JAMF Protect Github for you to import. jamfprotect/custom_analytic_detections at main · jamf/jamfprotect (github.com)

Hello good day, 
We're aiming to establish a way to monitor any download events that occur on users' Macbooks (we're overseeing more than 30 Macbooks). We've sought advice from Jamf support, but unfortunately, we didn't received a clear solution on how to set this up. I've tried several predicates without success. Hence, I'm inquiring here to see if I can gather any relevant information.

Based on what you've originally put in your predicate example. It sounds like you want to just monitor safari downloads.

Couple of ways you could do it, but they may be pretty resource heavy on your clients.
Personally, I would be carefully considering what do I want to monitor? All download activity, particular extensions, particular signatures etc. Is an analytic the best way to achieve what I want?   

What response did you get back from JAMF support?

We want to track all download activities on the user's Macbook, such as package installer or extension installations, with alerts sent through Jamf Protect if possible. Jamf support was uncertain about the specific predicate needed for a download event, as it could be complex. They directed me to check GitHub for any relevant information. Additionally, they also recommended that I explore Jamf Nation to see if there are similar posts or if I could get assistance from others who have experience setting up for this specific event.