Yes. You can configure Push to emit a webhook event every time a file is downloaded in a Push-enrolled browser.

You can send these events to your SIEM, SOAR, or other downstream platform to generate alerts for your security team.

In the Push admin console, go to Settings > Telemetry and configure a rule for the File downloads telemetry feed.

You can set the Scope (all employees, employee groups, or specific individuals) and select whether to capture download events for all profiles, profiles logged in with a company domain, or profiles logged in with a non-company domain.

Refer to our webhooks documentation for details on the webhook event itself.

Note: Safari is not supported for this feature.