Jamf Protect to audit all file access (new/read/update/delete) on an attached storage device

Jamf Protect is more or less an EDR with some DLP functions tacked on, most of the DLP functions revolve around allowing/disallowing USB mass storage devices and preventing sensitive data from being copied to removable storage. If you are needing something that can audit all activity with data on removable storage devices, you will need a more comprehensive DLP tool.