cloned or edited, this rule will not be applied to the macOS compliance blade. If the default name of the compliance rule for checking if assigned blades are running is changed, i.e. If nodeJS is installed on the Mac, build directories should be excluded in SBA policy (AR/EFR and TE) to improve performance.
Post-upgrade from the E80.89 release, there are no historic AR/TE events shown in the UI.
macOS does not provide any notifications about this automatically, so Endpoint Security presents a UserCheck message, as a guide for which application to grant FDA access, and a button to open the System Preferences. On macOS 10.15 Catalina, Full Disk Access has to be approved for several blades to work properly, including Media Encryption, VPN, Threat Emulation, Anti-Ransomware and Forensics.