Posted on 12-20-2021 08:15 AM
In Protect, when a Alert Auto-Resolves or just Resolves, what does that mean. Did a file get quarantined? Is the file/program blocked but still on the device? Did it get deleted? Do we know?
Solved! Go to Solution.
12-20-2021 11:07 AM - edited 12-20-2021 11:08 AM
Yes, the file gets quarantined inside this directory:
Library/Application Support/JamfProtect/Quarantine/<EVENT_UUID>
and also, the permissions are modified to strip off the execute permissions off the item before it gets moved to the quarantine
View solution in original post
Posted on 12-20-2021 11:09 AM
Thank you!
