Telegram monitoring on MacOS.

Products

• Data Loss Prevention
• Data Loss Prevention Cloud Detection Service for Endpoint
• Data Loss Prevention Endpoint Prevent

Issue/Introduction

You enabled Telegram monitoring in Application File Access but detection does not work for file upload on MacOS systems. 

Environment

DLP agent on MacOS systems.

Cause

Telegram application before uploading the file copies it first to its own temporary location and changes its extension.

Resolution

Add monitoring path to Channel Filters in Agent Configuration:
 /users/*/library/group containers/*.telegram/*/postbox/media/local-file* 

This is the location where Telegram copies files before upload.