/intercept-x-endpoint/b/blog/posts/forensic-snapshots-can-now-be-uploaded-to-s3-bucketsSophos EDR enabled devices are continually capturing data related to process, file, network and other system activity. EDR licensed customers have the ability to generate a forensic snapshot on demand where all activity being monitored is packaged upen-USTelligent Community 12