Jamf-Nation-Roadshow-Frankfurt-2019

Complementary notes for Jamf-Nation Roadshow Frankfurt 2019 presentation: "Security & Businesss Intelligence 101"

• Jamf Nation Roadshow (English) details here
• Jamf Nation Roadshow (German) details here

Who are we ?

We are Zentral Pro Services - a consulting, research and development company. We help clients unleash the potential of their Apple devices in a business environment.

We also build Zentral opensource.

---

Slides (english)

Here you'll find the english version of our slides.

Topic 1 - Inventory

Jamf Pro Inventory

• Inventory Collection details - https://docs.jamf.com/10.12.0/jamf-pro/administrator-guide/Computer_Inventory_Collection_Settings.html

Jamf Pro build-in Reporting (Jamf Pro 10.10 and higher)

• https://docs.jamf.com/10.12.0/jamf-pro/administrator-guide/Computer_Reports.html
• https://docs.jamf.com/10.12.0/jamf-pro/administrator-guide/Mobile_Device_Reports.html

Jamf Marketplace - Business Intelligence

• Jamf Marketplace - https://marketplace.jamf.com/apps/?category=Integrations&tags=Business%20Intelligence
• Jamf open source projects - https://jamf.github.io/
• Jamf open source projects#2 - https://github.com/jamf

Extra reporting - example projects

• Create CSV from Jamf Pro inventory (iOS apps) - https://github.com/nstrauss/jamf-cat-report
• Create CSV or XLSX from Jamf Pro inventory (advanced report builder) - https://github.com/zentralopensource/zentral/
• Grafana dashboards from MySQL data - https://github.com/krypted/Jamf_Grafana

Data-Warehouse solutions (SaaS)

• Splunk
• PowerBI
• DataStudio
• Tableau

---

Topic 2 - Platform Security

Apple Release notes

• Mojave release notes - https://support.apple.com/en-us/HT209149#macos10145
• macOS Security - https://support.apple.com/en-us/HT210119
• iOS Security - https://support.apple.com/en-us/HT210118

Apple Security

• CIS Apple OS Benchmark - https://www.cisecurity.org/benchmark/apple_os/
• Jamf CIS - https://github.com/franton/CIS-Apple-Security-Casper
• NIST AppleSec (10.12 draft) - https://github.com/usnistgov/applesec
• Community Guide to securing and improving privacy on macOS - https://github.com/drduh/macOS-Security-and-Privacy-Guide/

Notarization

• Apple Developer ID - https://developer.apple.com/developer-id/
• Apple Developer Security - https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
• Jamf blogpost on Notarization - https://www.jamf.com/blog/things-you-should-know-about-app-notarization/

Privacy Preference Policy Control

• Jamf PPPC-Utility - https://github.com/jamf/PPPC-Utility

Jamf Extension Attributes

• Jamf CIS - Extension Attributes - https://github.com/franton/CIS-Apple-Security-Casper

macOS Unified logging

• Apple Developer documentation - logging - https://developer.apple.com/documentation/os/logging
• State of logging (Blogpost) - https://www.amsys.co.uk/state-of-logging/

Endpoint Agents

• Osquery - https://osquery.io
• Santa - https://santa.dev/

Security Analytics

• Elastic Stack - https://www.elastic.co/blog/elastic-stack-7-0-0-released
• Kolide Fleet - https://github.com/kolide/fleet
• Zentral (open source) - https://github.com/zentralopensource/zentral

---

Topic 3 - Identity

Identity Provider

• Okta
• Azure
• Gsuite
• Google Cloud Idenity
• OneLogin
• Auth0
• Shibboleth

Jamf Connect

• IdP overview - https://docs.jamf.com/jamf-connect/1.1.1/login/administrator-guide/Integration_with_an_Identity_Provider.html
• IdP OpenID Config - https://docs.jamf.com/jamf-connect/1.1.1/login/administrator-guide/Configuration_for_IdPs_using_OpenID_Connect.html

Jamf AD CS Connector

• ADCS connector - https://www.jamf.com/resources/technical-papers/integrating-with-active-directory-certificate-services-ad-cs-using-jamf-pro/