{
"_event_score": 10,
"exec_args":
{
"args":
{
"1": "/Applications/OneDrive.app/Contents/StandaloneUpdater.app/Contents/MacOS/OneDriveStandaloneUpdater"
},
"args_compiled": "/Applications/OneDrive.app/Contents/StandaloneUpdater.app/Contents/MacOS/OneDriveStandaloneUpdater"
},
"exec_env":
{
"env":
{
"PATH": "/usr/bin:/bin:/usr/sbin:/sbin",
"SHELL": "/bin/zsh",
"SSH_AUTH_SOCK": "/private/tmp/com.apple.launchd.CMQRpMaoht/Listeners",
"TMPDIR": "/var/folders/y1/_qx51bb12qgbj1w28d08f20h0000gp/T/",
"USER": "dan",
"XPC_FLAGS": "1",
"XPC_SERVICE_NAME": "com.microsoft.OneDriveStandaloneUpdater"
},
"env_compiled": "XPC_SERVICE_NAME=com.microsoft.OneDriveStandaloneUpdater,SSH_AUTH_SOCK=/private/tmp/com.apple.launchd.CMQRpMaoht/Listeners,PATH=/usr/bin:/bin:/usr/sbin:/sbin,XPC_FLAGS=1,SHELL=/bin/zsh,TMPDIR=/var/folders/y1/_qx51bb12qgbj1w28d08f20h0000gp/T/"
},
"header":
{
"action": "Deny",
"event_name": "PROHIBITED_APP_BLOCKED",
"time_seconds_epoch": 1594409526
},
"host_info":
{
"host_name": "dan_macbook_pro",
"host_uuid": "212B56BD-53E8-57AE-A7B5-4C12BC9343AA",
"osversion": "macOS 10.15.5 (Build 19F101)",
"primary_mac_address": "3c:22:fb:d0:38:45",
"serial_number": "C02CV6ADMD6N"
},
"identity":
{
"cd_hash": "2b39a2a5a831c4a057c384aea4cc6148cdd62044",
"signer_id": "com.apple.xpc.proxy",
"signer_id_truncated": 0,
"signer_type": 0,
"team_id": "",
"team_id_truncated": 0
},
"subject":
{
"audit_id": 4294967295,
"audit_user_name": "-1",
"effective_group_id": 20,
"effective_group_name": "staff",
"effective_user_id": 502,
"effective_user_name": "dan",
"group_id": 20,
"group_name": "staff",
"process_hash": "F05BCE5550A13563DA7FB5C5A9E24B1EAFFA7B30",
"process_id": 571,
"process_information":
{},
"process_name": "/usr/libexec/xpcproxy",
"responsible_process_id": 571,
"responsible_process_name": "",
"session_id": 100000,
"terminal_id":
{
"ip_address": "0.0.0.0",
"port": 0,
"type": 0
},
"user_id": 502,
"user_name": "dan"
},
"texts": ["matched team signing id: UBF8T346G9"]
}
cmdReporter Wiki