Skip to main content
Question

Basic Smart Group for App Title

  • November 11, 2015
  • 4 replies
  • 23 views
R
Forum|alt.badge.img+3

Hi All,

I'm basically trying to achieve creating a smart group for mobile devices that have a certain app installed, and the list of Apps is large.

My specific goal is to deal with the xcode Ghost malware listed here http://www.jamfsoftware.com/blog/how-to-conquer-xcodeghost/

So that said, I've created a Mobile Device Smart group that lists all the app names (screen shot).

However, as the command is App Name: Has : it throws too many users
For example, if the App name is "ting", it will show users with "Targeting maths".

Is the a way to accurately search for these Apps and not see excess data?

Cheers
Rhys

    4 replies

    L
    Forum|alt.badge.img+16
    • Look
    • Valued Contributor
    • November 12, 2015

    Just had a look at that, strange there is no App Name "is" function, seems almost like a bug or oversite on JAMF's, what happens when someone creates an app called Reader, Viewer, Browser or Player the number of false positives would be overwhelming!

    R
    Forum|alt.badge.img+3
    • rmhughes
    • Author
    • New Contributor
    • November 16, 2015

    So how would JAMF advise we combat this issue?

    Thanks again!

    J
    Forum|alt.badge.img+14
    • jhuls
    • Valued Contributor
    • November 23, 2015

    Interested to hear something on this as well.

    mm2270
    Forum|alt.badge.img+24
    • mm2270
    • Legendary Contributor
    • November 23, 2015

    I would suggest putting in the application names in the Smart Group ending in .app as often as possible. So for example, in the case of "ting" also pulling up "Targeting Maths" as well, if you use "ting.app" as the search criteria, its not going to find Targeting Maths, since its not named "Targeting.app Maths"

    I agree that its odd there is no "is" functionality, but that may be because its searching through the whole list of installed applications, hence why it uses "has". "is" would indicate that's the only application in the apps list, which is obviously never going to be the case. Still, if JAMF can find a better matching method to use with this, it would certainly help stop the false positives.

    Terms & ConditionsCookie settingsAccessibility statement