Skip to main content
Use this page as the Claude-specific Jamf entry point. For complete managed forwarding setup, follow the destination-specific self-serve guide:

Deploy Beacon With Jamf And GCS

Install Beacon with Jamf Pro, set up Claude Code, Codex, and Cursor, and forward runtime plus inventory JSONL to GCS.

Deploy Beacon With Jamf And S3

Install Beacon with Jamf Pro, inject AWS provider settings through MDM, configure Claude Code hooks, and forward runtime plus inventory JSONL to S3.

Deploy Beacon With Jamf And CrowdStrike Falcon

Install Beacon with Jamf Pro, configure Claude Code hooks, and forward runtime JSONL to CrowdStrike Falcon LogScale HEC.

Deploy Beacon With Jamf And Microsoft Sentinel

Install Beacon with Jamf Pro and forward Claude Code, Codex CLI, and Cursor runtime events to Microsoft Sentinel.

​
What the Jamf Claude flow installs

The packaged Claude Jamf helpers configure:
  • the Beacon system endpoint collector
  • Claude Code hooks for the logged-in console user
  • /var/log/beacon-agent/runtime.jsonl for runtime activity
  • /var/log/beacon-agent/inventory_state.jsonl for metadata-only inventory snapshots
  • optional Vector forwarding for supported destinations such as AWS S3 or Falcon LogScale
End users should not need to run Beacon commands or edit local Beacon configuration when the Jamf policy is configured correctly.

​
Packaged helper scripts

The macOS package includes these Claude-specific helpers:
Use repair-hooks.sh when you only need to repair the system endpoint and reinstall Claude hooks. Use gcs/repair-hooks-and-forwarder.sh when one Jamf policy should repair the endpoint, reinstall Claude hooks, and configure GCS runtime and inventory forwarding through com.beacon.endpoint.gcs-forwarder. Use s3/repair-hooks-and-forwarder.sh when one Jamf policy should repair the endpoint, reinstall Claude hooks, and configure S3 forwarding. Use falcon/repair-hooks-and-forwarder.sh when one Jamf policy should repair the endpoint, reinstall Claude hooks, and configure CrowdStrike Falcon LogScale HEC forwarding.

Jamf Pro Overview

Review the general Beacon Jamf deployment model and package layout.

Jamf S3 Forwarding

Configure S3 forwarding through a Jamf policy.

Jamf GCS Forwarding

Configure GCS forwarding through a Jamf policy.

CrowdStrike Falcon LogScale

Review Falcon parser setup, HEC settings, and validation steps.

Jamf and Microsoft Sentinel

Roll Beacon out to Macs with Jamf Pro and forward runtime events to Sentinel.