What is a one sentence summary of your feature request?
The ability to create policy based on previously logged events using the PolicyPakAdmin tool
Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.
Create policies/rules for logged events such as installation of pkg/dmg apps or actions like sudo commands using the Mac Policy Tool. This would simplify the policy creation process by automatically creating them
How do you currently solve the challenges you have by not having this feature?
Currently, either the endpoint must be scanned with the admin tool, which would not cover any apps that is no longer on the system; or manually created in the cloud editor, which doesn’t allow for immediate testing.
