Skip to main content
Solved

What does Resolved mean?

  • December 20, 2021
  • 2 replies
  • 19 views

Forum|alt.badge.img+11

In Protect, when a Alert Auto-Resolves or just Resolves, what does that mean. Did a file get quarantined? Is the file/program blocked but still on the device? Did it get deleted? Do we know?

Best answer by ljcacioppo

Yes, the file gets quarantined inside this directory:

Library/Application Support/JamfProtect/Quarantine/<EVENT_UUID>


and also, the permissions are modified to strip off the execute permissions off the item before it gets moved to the quarantine 

2 replies

ljcacioppo
Forum|alt.badge.img+17
  • Jamf Heroes
  • Answer
  • December 20, 2021

Yes, the file gets quarantined inside this directory:

Library/Application Support/JamfProtect/Quarantine/<EVENT_UUID>


and also, the permissions are modified to strip off the execute permissions off the item before it gets moved to the quarantine 


Forum|alt.badge.img+11
  • Author
  • Valued Contributor
  • December 20, 2021

Thank you!