When the user opens the "Save As" dialog, the Open and Save Panel Service will be launched by the system.
Now I want to monitor the "Save As" operation in a user program, so is there an Endpoint Security event that I can use to monitor when the Open and Save Panel Service is launched?
I've tested the ES_EVENT_TYPE_AUTH_EXEC event, but it did not work.
is there an Endpoint Security event that I can use to monitor when the Open and Save Panel Service is launched?
Not specifically. You might try to work this out indirectly, but that’s likely to be problematic. If your product needs this, I recommend that you file an enhancement request explaining what you need to do and why.
Please post your bug number, just for the record.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"