Blocking macOS Apps and Processes Using a Custom Prevent List

Jamf Protect Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Create a custom prevent list with Jamf Protect to block additional processes and quarantine files on computers by defining hash or signing information associated with the process.

  1. In Jamf Protect, click Threat Prevention.
  2. Click the Custom Prevention Lists tab.
  3. Click Create Prevent List or Edit to change the list settings.
  4. Enter a name for the list.
  5. (Optional) Enter a description for the list.
  6. Choose one of the following prevent types:
    • File Hash —

      An executing binary file that can be a SHA-1 or SHA-256 hash.

    • Signing Information —

      The signature information of an executing binary. You can specify a team ID, code directory hash, or signing ID.

  7. Add list data using one of the following methods:
    Note:

    Lists are limited to 100,000 items.

    • Plain Text —

      Use the text field to add values to block.

    • File Upload —

      Upload a new-line-delimited list of values to block.

  8. Click Save.

The custom prevent list will automatically deploy to computers during their next check-in with Jamf Protect.