Extension Attribute for retrieving the state of Web Protection
installer_initiated_network_connection
A custom Analytic to monitor the invocation of curl, nscurl where the responsible process is Installer. Could indicate that when running a .pkg a pre/post install script retrieves additional payloads from a remote server.
curl,nscurlwhere the responsible process isInstaller. Could indicate that when running a.pkga pre/post install script retrieves additional payloads from a remote server.