Hi all,I hope someone can help me to find a solution.Within FireEye HX I
could create an alert with "fileWriteEvent/fileName starts-with xxx"I
try to rebuild this within Jamf Protect.I have created a custom analytic
with the following analytic filter...
Hi @ThijsX thanks for your reply...The problem that I have is, that I
don't know where the file would be created.Could I use the / as target
or path - to check the whole system?Could you explain what does the "cd"
stand for? I either missed it in the...
Hi, we got it working with Rob from Jamf.For this, the install.sh script
was adapted (we install threat prevention and the firewall) in 3 parts.
The version 10.7.5 package of McAfee Endpoint Security the script: the
configuration profile with PPPC, s...