Hi all,I hope someone can help me to find a solution.Within FireEye HX I
could create an alert with "fileWriteEvent/fileName starts-with xxx"I
try to rebuild this within Jamf Protect.I have created a custom analytic
with the following analytic filter...
