Skip to content

Add system-wide cron job analytic rule#133

Open
Fabien Bloume (nusantara-self) wants to merge 1 commit into
jamf:mainfrom
nusantara-self:systemwidecronjob_analytic
Open

Add system-wide cron job analytic rule#133
Fabien Bloume (nusantara-self) wants to merge 1 commit into
jamf:mainfrom
nusantara-self:systemwidecronjob_analytic

Conversation

@nusantara-self

Copy link
Copy Markdown

This PR adds an analytic for system-wide cron job changes detection, which is not covered by default analytics in JAMF Protect.

This commit adds an analytic for system-wide cron job changes detection, which is not covered by default rule.
@txhaflaire

Copy link
Copy Markdown
Collaborator

Hi Fabien Bloume (@nusantara-self)

Thanks for the contribution to this repository, we are going to review the PR as soon as possible.
Feel free in meantime to add any screenshots from the captured alerts during your testing here as well.

Cheers,
Thijs

@nusantara-self

Copy link
Copy Markdown
Author

Hello Thijs Xhaflaire (@txhaflaire),

Thanks a lot! Here's an example screenshot showing what the alert looks like. Without this custom rule, a direct change to /etc/crontab would go unnoticed / would not trigger an alert.

image

Cheers,
Fabien

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants