jamfprotect
jamfprotect copied to clipboard
generic / scp_file_copied_remote_destination
Custom Analytics to detect the use of scp specifically to transfer files to a remote destination or a generic rule to detect either scp, sftp or rsync.
provided Context Items could highlight source file and destination paths.