Uptycs macOS telemetry updates

[tsale]

EDR Telemetry Pull Request

Contribution Details

Consolidates the Uptycs macOS telemetry updates that were originally submitted as separate PRs for individual categories/subcategories:

• Update EDR_telem_mac.json - Uptycs - File Activity #172 Update EDR_telem_mac.json - Uptycs - File Activity
• Update EDR_telem_mac.json - Uptycs - User & Session Activity #173 Update EDR_telem_mac.json - Uptycs - User and Session Activity
• Update EDR_telem_mac.json - Uptycs - Process Activity #174 Update EDR_telem_mac.json - Uptycs - Process Activity
• Update EDR_telem_mac.json - Uptycs - Network Activity #175 Update EDR_telem_mac.json - Uptycs - Network Activity
• Update EDR_telem_mac.json - Uptycs - System Extension & Driver #176 Update EDR_telem_mac.json - Uptycs - System Extension and Driver
• Update EDR_telem_mac.json - Uptycs - Code Signing & Trust #177 Update EDR_telem_mac.json - Uptycs - Code Signing and Trust
• Update EDR_telem_mac.json - Uptycs - Remaining Categories (Placeholder) #178 Update EDR_telem_mac.json - Uptycs - Remaining Categories (Placeholder)
• Update EDR_telem_mac.json - Uptycs - File Metadata #179 Update EDR_telem_mac.json - Uptycs - File Metadata

Changed file:

• EDR_telem_macOS.json

Telemetry Validation

Documentation or Evidence:

• Official documentation
• Screenshots attached
• Sanitized logs provided
• Private documentation

This PR preserves the submitted Uptycs macOS values as a single OS-scoped review unit. Evidence details remain as provided by the contributor in the original PRs and should be reviewed before publication/merge.

Type of Contribution

• Adding telemetry information for an existing EDR product

Validation Details

EDR Product Information

• EDR Product Name: Uptycs EDR
• EDR Version: Not specified in the original PRs
• Operating System(s) Tested: macOS

Testing Methodology

Not specified in the original PRs. This consolidation was validated mechanically by:

• applying the Uptycs macOS values from PRs Update EDR_telem_mac.json - Uptycs - File Activity #172-Update EDR_telem_mac.json - Uptycs - File Metadata #179 onto current main
• resolving the stale-branch conflicts caused by changes to EDR_telem_macOS.json since the original PRs were opened
• validating EDR_telem_macOS.json as syntactically valid JSON

Additional Notes

The original Uptycs macOS PRs were conflicting with current main. This PR is intended to replace those individual PRs so the project can review the Uptycs macOS telemetry updates in one OS-scoped pull request.

[tsale]

@joshlemon thank you for the Uptycs EDR telemetry contributions.

For future submissions, please group related telemetry updates into a single pull request per operating system rather than opening one pull request per individual category or row. For example:

• one PR for multiple Windows changes
• one PR for multiple Linux changes
• one PR for multiple macOS changes

This makes review, validation, conflict resolution, and merging much easier for the project.

I’ve consolidated the current macOS Uptycs submissions into one OS-scoped PR here:

• macOS: #197

The original individual macOS PRs #172-#179 have been closed as superseded so review can continue in the consolidated PR.

Thanks again for contributing.