Jamf telemetry basics
ID: 3760f72c-f300-5587-a552-c364891a7dc6
STIX ID: report--3760f72c-f300-5587-a552-c364891a7dc6
Feed Name: Jamf Blog
**Jamf telemetry basics:** This guide explains Jamf Mac telemetry message anatomy—top-level fields (event, host, process, metadata), process and audit-token concepts for tracing process lineage, code-signing and execution context details, and practical patterns for threat hunting and incident response using Jamf telemetry.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.