Running into an MDE issue with tagging

[ifbell]

We are starting to rollout Microsoft Defender and I have been tasked with tagging the Macs on the Jamf side. I have been given the XML they are using in intune but I am not finding documentation to turn that into something Jamf useable.

<dict>
<key>key</key>
<string>GROUP</string>
<key>value</key>
<string>****** - ***** - *****GLOBAL ******</string>
</dict>
</array>
</dict>

[akw0045]

Adding the tags in the onboarding PLIST didn't work for me. but there's a command line tool in defender that allows you to add the tags. Just run:

sudo mdatp edr tag set --name GROUP --value <type tag here>

from a policy and it works.

You can also use the mdatp command to build extension attributes for jamf.