Analysis of MacOS Rapid Security Response (RSR)

Content Authoring BigFix.me
1

Hello Team,

I want to create an analysis function related to Rapid Security Response (RSR) collection on MacOS.
Does anyone know how I can collect in this regard?

2

Hi,

I have not made anything but you might find the following info helpful in creating an analysis to pull this information

3

@strawgate

Hello strawgate,

thanks for the help :slight_smile:
I think you can create an analysis function based on what you told me.

I have an additional question,
If the output is like this, is it possible to output it directly with the analysis function?
Or should I create a file and read it?

thank you!!

4

Analyses/Relevance cannot make changes to endpoints such as running shell commands (by design for security, they are “read-only”).

So yes, as you suggest, you can have a policy action that runs the necessary commands to output the desired data to a file, then have an analysis/property read it to return it to BigFix.

6

I tried to create a file like below.

/usr/sbin/system_profiler SPSoftwareDataType | awk -F ': ’ ‘/System Version/ {print $2}’ > “”

The above path is intended to be the path where the BigFix Client is installed.

I am going to do it with Apple Script.

Please give me a good example of writing a file!!