Sophos Community
Sophos Community
  • Site
  • User
  • Site
  • Search
  • User
  • Community & Product Forums
    • Sophos Endpoint
    • Sophos Firewall
    • Sophos Central
    • Sophos Factory
    • Sophos Mobile
    • Sophos NDR
    • Sophos Switch
    • Sophos Wireless
    • Sophos Email
    • UTM Firewall
    • Community Chat
    • All Sophos Products
  • Community Blogs & Events
    • Sophos Community Blog
    • Community Security Blog
    • Product Documentation Blog
    • Application Control
  • Getting Started
  • Sophos Partners
    • MSP Guides
  • Member Recognition
    • Community Leaderboards
  • Launch Support Portal
  • More
  • Cancel
Sophos Endpoint

Sophos Endpoint

  • Release Notes & News
  • Discussions
  • Recommended Reads
  • Threat Hunting Academy
  • Early Access Programs
  • Live Discover Query Forum
  • More
  • Cancel
  • New
Sophos Endpoint requires membership for participation - click to join
Helpful Resources
⁃ Live Discover & Response Query Forum
⁃ Query Corner Announcement and Master Index
⁃ Best Practices On Using Live Discover & Response Query Forum
⁃ Sophos EDR Threat Hunting Framework
Latest Live Discover and Response Queries
  • LuCar Toni
    Live Discover Query for all DNS requests in a time frame with process (ZTNA App discover)
    Approved over 1 year ago
Subscribe to Sophos Notifications Follow us on Twitter Connect with us on Facebook Join us on Reddit
Sophos Endpoint Blog Posts
  • MacOS Endpoint EAP - August 2023 Update

    Announcements: MacOS Endpoint EAP - August 2023 Update

    Sophos
    Sophos
    New macOS Endpoint Protection Features As of August…
    • 8 Aug 2023
  • Installer Updates: Central Windows Endpoint/Server Azure Code Signing changes

    Release Notes & News: Installer Updates: Central Windows Endpoint/Server Azure Code Signing changes

    Sophos
    Sophos
    In the 2023.1 release of Sophos Central Endpoint/Server…
    • 26 Jul 2023
  • New Techvids Release - Sophos Endpoint: Sophos File Scanner

    Release Notes & News: New Techvids Release - Sophos Endpoint: Sophos File Scanner

    Sophos
    Sophos
    In this video, Simon from Sophos Techvids will show…
    • 29 Jun 2023
<>
Latest Sophos Endpoint Recommended Reads
  • Discussion

    Device Migration API Postman Collection

    9006 views
    2 replies
    Latest 6 months ago
    by Mario Christ
  • Discussion

    [QueryCorner][September2022] Data Lake - IOC Hunting

    7944 views
    7 replies
    Latest 6 months ago
    by JeramyKopacko
  • Discussion

    How to find and remove inactive devices from Sophos Central

    3830 views
    0 replies
    Started 6 months ago
    by Gladys
  • Discussion

    Sophos Central: Endpoint Software Management (ESM) Visualization

    8435 views
    0 replies
    Started 8 months ago
    by GlennSen
  • Discussion

    [QueryCorner][March2023] Deep Diving into OneNote Attacks

    7445 views
    3 replies
    Latest 8 months ago
    by Matthew Ritchie
<>
Latest Community Discussions in Sophos Endpoint
  • Suggested Answer

    Data Lake Query similar to Endpoint File Access History 0

    257 views
    3 replies
    Latest 1 day ago
    by Vern Severight
  • Suggested Answer

    Exclude Threat Detection "TA0005 - Defense Evasion" 0

    328 views
    4 replies
    Latest 2 days ago
    by BrucekConvergent
  • Not Answered

    Not receiving new investigation mail notification anymore. 0

    824 views
    3 replies
    Latest 2 days ago
    by Qoosh
  • Not Answered

    ScanD not running MacOS 0

    171 views
    1 reply
    Latest 3 days ago
    by Qoosh
  • Not Answered

    IPS/NTP HTTPS Decryption - ERR_EMPTY_RESPONSE issues since latest upgrade to NTP64 2023.2.573 0

    1190 views
    1 reply
    Latest 3 days ago
    by Qoosh
  • Answered

    Controlled/blocked applications are showing up in the list of Allowed Applications - Sophos Central. +1

    1889 views
    6 replies
    Latest 3 days ago
    by Qoosh
  • Answered

    Disable Tamper Protection - Device Removed from Portal 0

    517 views
    2 replies
    Latest 3 days ago
    by Susan Pieroni
  • Not Answered

    Sophos Support - what is the DACH ESG VIP Support Team? 0

    266 views
    1 reply
    Latest 3 days ago
    by Qoosh
  • Answered

    Error instalación no espacio +1

    281 views
    1 reply
    Latest 3 days ago
    by Qoosh
  • Not Answered

    About Threat Graphs 0

    264 views
    1 reply
    Latest 4 days ago
    by Gladys
  • Not Answered

    XDR Query - Get OS Buildnumber with Patchlevel 0

    208 views
    1 reply
    Latest 4 days ago
    by Sophos User930
  • Not Answered

    Sophos keeps notifying c:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Exec_28a (T1059.001) and Exec_6a (T1059.001) 0

    339 views
    4 replies
    Latest 6 days ago
    by Matteo Vinti
  • Answered

    Sophos update failing 0

    2367 views
    3 replies
    Latest 8 days ago
    by GlennSen
  • Suggested Answer

    Microsoft office applications started being blocked on macOS machines +1

    3570 views
    28 replies
    Latest 9 days ago
    by Qoosh
  • Not Answered

    MacOS Sonoma 14.0 slowness, CPU loading and battery depletion 0

    1590 views
    6 replies
    Latest 9 days ago
    by Jon Vassar
>
Related Tags
  • Central Endpoint (Windows)
  • Device Management (Windows Endpoint)
  • Endpoint
  • Endpoint & Server Protection
  • Intercept X
  • Miscellaneous
  • Scanning/Detections
  • Sophos Central
  • Sophos Central Endpoint
  • Sophos Cloud
Unfiltered HTML
  • Getting started
  • Legal
  • Privacy
  • Cookies

© 1997 - 2023 Sophos Ltd. All rights reserved.