Skip to main content
Question

Jamf Protect to audit all file access (new/read/update/delete) on an attached storage device

  • Dec 12, 2024 4:47 PM UTC
  • 1 reply
  • 50 views

Forum|alt.badge.img+3

Hi,

Anyone using Jamf Protect to audit all file access (new/read/update/delete) on an attached storage device?

If so, how are you setting that up?

 

Thanks

1 reply

AJPinto
Forum|alt.badge.img+26
  • Legendary Contributor
  • Dec 13, 2024 2:25 PM UTC

Jamf Protect is more or less an EDR with some DLP functions tacked on, most of the DLP functions revolve around allowing/disallowing USB mass storage devices and preventing sensitive data from being copied to removable storage. If you are needing something that can audit all activity with data on removable storage devices, you will need a more comprehensive DLP tool.