Policies/

No 1Password emergency kit stored in desktop, documents, or downloads folders

Brock Walters

Looks for PDF files with file names typically used by 1Password for emergency recovery kits. To protect the performance of your devices, the search is one level deep and limited to the Desktop, Documents, Downloads, and Shared folders.

Control

Create or edit a configuration profile with the following information:

Create or edit the following script and configure it to run when the check fails:

Check

Use the policy below to verify:

Query PowerShellNEW BashNEW

SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM file WHERE filename LIKE '%Emergency Kit%.pdf' AND (path LIKE '/Users/%/Desktop/%' OR path LIKE '/Users/%/Documents/%' OR path LIKE '/Users/%/Downloads/%' OR path LIKE '/Users/Shared/%'));

if [ -z "$(find /Users/*/Desktop /Users/*/Documents /Users/*/Downloads /Users/Shared -type f -iname '*Emergency Kit*.pdf' 2>/dev/null)" ]; then echo 1; else echo 0; fi