search

google / santa

A binary authorization and monitoring system for macOS
https://santa.dev
Apache License 2.0
4.41k stars 298 forks source link

Support log upload when file system monitoring denies an operation #1260

Open izzh opened 8 months ago

izzh commented 8 months ago

I hope to support configuring a custom URL to automatically upload file system monitor blocking events to the sync server. The log content should be consistent with the fields supported by "EventDetailURL". Thanks～ image

pmarkowsky commented 5 months ago

@izzh Are you looking for something more than the https://santa.dev/deployment/file-access-auth.html#eventdetailurl in the FAA config and the WatchItem EventDetailURL that lets you override that?