Thanks for you reply. The case ID: FB8802252 (Open BSM being deprecated with Big Sur) So Is there any other way to capture the login/logout events using system extensions?

Hi @Jacy_Jiang, Were you able to find out the replacement for Login/Logout Events and Authentication/Authorization events from EndPoint Security? Because those are not mentioned in the events types present in EndPointSecurity. Please let me know if you have found any replacement on how to capture login/Logout events in system-extensions. Thank you very much!