What does Resolved mean?

lehmanp00
Contributor III

In Protect, when a Alert Auto-Resolves or just Resolves, what does that mean. Did a file get quarantined? Is the file/program blocked but still on the device? Did it get deleted? Do we know?

1 ACCEPTED SOLUTION

ljcacioppo
Contributor III

Yes, the file gets quarantined inside this directory:

Library/Application Support/JamfProtect/Quarantine/<EVENT_UUID>


and also, the permissions are modified to strip off the execute permissions off the item before it gets moved to the quarantine 

View solution in original post

2 REPLIES 2

ljcacioppo
Contributor III

Yes, the file gets quarantined inside this directory:

Library/Application Support/JamfProtect/Quarantine/<EVENT_UUID>


and also, the permissions are modified to strip off the execute permissions off the item before it gets moved to the quarantine 

lehmanp00
Contributor III

Thank you!