cmdReporter Wiki

Open navigation

Example cmdReporter +DLP Profile

The team ID UBF8T346G9 in the profile is for the Microsoft Office application suite.

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
    <dict>
        <key>PayloadContent</key>
        <array>
            <dict>
                <key>PayloadContent</key>
                <dict>
                    <key>com.cmdsec.cmdreporter.dlp</key>
                    <dict>
                        <key>Forced</key>
                        <array>
                            <dict>
                                <key>mcx_preference_settings</key>
                                <dict>
                                    <key>SensitiveFolders</key>
                                    <array>
                                        <string>/Users/.*/Desktop</string>
                                        <string>/Users/.*/Downloads</string>
                                        <string>/Users/.*/Documents</string>
                                    </array>
                                    <key>SensitiveApplications</key>
                                    <dict>
                                        <key>DLPExecutableNames</key>
                                        <array>
                                            <string>Calculator</string>
                                        </array>
                                        <key>DLPSigningIdentifiers</key>
                                        <array>
                                            <string>com.apple.TextEdit</string>
                                            <string>com.automattic.wordpress</string>
                                        </array>
                                        <key>DLPTeamIdentifiers</key>
                                        <array>
                                            <string>UBF8T346G9</string>
                                        </array>
                                    </dict>
                                    <key>SensitiveUTIs</key>
                                    <array>
                                        <string>org.openxmlformats.*</string>
                                    </array>
                                </dict>
                            </dict>
                        </array>
                    </dict>
                </dict>
                <key>PayloadDescription</key>
                <string></string>
                <key>PayloadDisplayName</key>
                <string>Custom</string>
                <key>PayloadEnabled</key>
                <true />
                <key>PayloadIdentifier</key>
                <string>6233E67C-DB12-49CB-9FD0-FF4B91E10C56</string>
                <key>PayloadOrganization</key>
                <string>cmdSecurity inc</string>
                <key>PayloadType</key>
                <string>com.apple.ManagedClient.preferences</string>
                <key>PayloadUUID</key>
                <string>6233E67C-DB12-49CB-9FD0-FF4B91E10C56</string>
                <key>PayloadVersion</key>
                <integer>1</integer>
            </dict>
        </array>
        <key>PayloadDescription</key>
        <string></string>
        <key>PayloadDisplayName</key>
        <string>03-31-20-cmdReporter-dan-testing-profile</string>
        <key>PayloadEnabled</key>
        <true />
        <key>PayloadIdentifier</key>
        <string>3371FFF7-719E-44E0-8D30-1E1E51B65204</string>
        <key>PayloadOrganization</key>
        <string>cmdSecurity inc</string>
        <key>PayloadRemovalDisallowed</key>
        <true />
        <key>PayloadScope</key>
        <string>System</string>
        <key>PayloadType</key>
        <string>Configuration</string>
        <key>PayloadUUID</key>
        <string>3371FFF7-719E-44E0-8D30-1E1E51B65204</string>
        <key>PayloadVersion</key>
        <integer>1</integer>
    </dict>
</plist>


Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.