- Improvements to configuration profile preference assignment consistency.
- Optimizations and improvements to event collection filters.
- New: File event monitoring now general release.
- Full Details: FileEvent Logging Overview
- Fixed: In rare cases cmdReporter would collect incomplete audit information. Added additional logic and verification to remediate.
- Performance improvements and minor bug fixes.
cmdReporter Wiki
- General Information
- Preference Documentation
-
Log Data Documentation
-
Log Data Examples
- APP_METRICS
- AUDIO_VIDEO_DEVICE_EVENT
- AUDIT_CLASS_VERIFICATION_EVENT
- AUE_ACCEPT
- AUE_AUTH_USER
- AUE_BIND
- AUE_CHDIR
- AUE_CHROOT
- AUE_CONNECT
- AUE_EXECVE
- AUE_EXIT
- AUE_FORK
- AUE_GETAUID
- AUE_KILL
- AUE_LISTEN
- AUE_LOGOUT
- AUE_LW_LOGIN
- AUE_MAC_SET_PROC
- AUE_MOUNT
- AUE_PIDFORTASK
- AUE_POSIX_SPAWN
- AUE_PTRACE
- AUE_REMOVE_FROM_GROUP
- AUE_SESSION_CLOSE
- AUE_SESSION_END
- AUE_SESSION_START
- AUE_SESSION_UPDATE
- AUE_SETPRIORITY
- AUE_SETSOCKOPT
- AUE_SETTIMEOFDAY
- AUE_SHUTDOWN
- AUE_SOCKETPAIR
- AUE_SSAUTHINT
- AUE_SSAUTHMECH
- AUE_SSAUTHORIZE
- AUE_TASKFORPID
- AUE_TASKNAMEFORPID
- AUE_UNMOUNT
- AUE_WAIT4
- CMDREPORTER_TAMPER_EVENT
- FILE_EVENT
- GATEKEEPER_INFO_EVENT
- GATEKEEPER_MANUAL_OVERRIDES
- GATEKEEPER_QUARANTINE_LOG
- HARDWARE_EVENT
- LICENSE_INFO_EVENT
- PREFERENCE_LIST_EVENT
- PRINT_EVENT_INFORMATION
- PROHIBITED_APP_BLOCKED
- SIGNAL_EVENT
- UNIFIED_LOG_EVENT
- XPROTECT_DEFINITIONS_VERSION_INFO
- XPROTECT_EVENT_LOG
- Interesting Types of Events
-
Log Data Examples
- Related Tech and Configurations
- Compliance