Applies to: Jamf Protect
Jamf Protect is advanced software that protects Apple’s macOS software. It is used to maintain endpoint compliance, anti-virus, and malware protection and focuses on remediating Mac-specific threats. Jamf Protect is integrated with EventTracker to send logs using the Jamf Protect API.
EventTracker provides insights about the Jamf Protect alerts and device activities. EventTracker reports Jamf Protect alerts and device activities which provide a detailed summary for various events like the USB devices insertions, prompts regarding user credentials before the process execute, etc.
EventTracker Alerts notify crucial events like suspicious activities, privilege escalation, defense evasion, and others.
After the Jamf Protect software is configured to deliver the Jamf Protect events to EventTracker, then the alerts, dashboards, and reports can be configured into EventTracker.
Reports
Alerts
The configuration details are consistent with the EventTracker version 9.2x and later, and the Jamf Protect software.
To configure Jamf Protect to send logs to EventTracker, refer to the How-to Guide.
For more information, please refer to the Integration Guide.