Alert Actions

Jamf Protect Documentation

Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
Alert actions describe the actions reported by Jamf Protect. The following actions are recorded:
Prevented
  • Threat prevention has blocked and quarantined a process that matches the threat database. For more information, see Endpoint Threat Prevention with Jamf Protect.

  • Tamper prevention stopped unwanted changes to disable or bypass Jamf Protect macOS endpoint security. For more information, see Tamper Prevention.

  • Advanced threat controls intervened when unsafe or malicious activity considered high-risk by Jamf Threat Labs was detected. For more information, see Advanced Threat Controls.

Reported
(Threat prevention only) A detected process matches the Jamf Protect threat database. Users may need to take action on the alert.
SmartGroup

(Analytics only) An analytic with the Add to Jamf Pro Smart Group action enabled is detected and adds the computer to a smart computer group that uses the analytic as membership criteria in Jamf Pro. For more information, see Setting Up Analytic Remediation With Jamf Pro.