we capture the delete event with apple end point security and try to restrict that files(which had protection) deletion inside specific app folder.