Sophos Community
Sophos Community
  • User
  • Site
  • Search
  • User
  • Community & Product Forums
  • Community Blogs
  • Partners
  • Support Portal
  • Get started
  • Blogs
    • Sophos Community Blog
    • Sophos Endpoint
    • Sophos Firewall
    • Zero Trust Network Access
    • Sophos Switch
    • UTM Firewall
    • Sophos Wireless
    • Sophos Central
    • Sophos Cloud Optix
    • Sophos Central API
    • Sophos Factory
    • Sophos Email
  •  
    • Phish Threat
    • Sophos XDR
    • Sophos Mobile
    • On-Premise Endpoint
    • Encryption
    • Sophos Partners
    • Support Portal Feedback
    • Product Documentation Blog
    • SophosLabs
    • Free Tools
    • Sophos Integrations
  • Products
    • Endpoint Security
      • Endpoint protection - next-gen antivirus
      • Endpoint detection and response (XDR)
      • Mobile security
    • Email Security
      • Sophos Email
      • Phish Threat
    • Network Security
      • Sophos Firewall
      • UTM firewall
      • Zero trust network access (ZTNA)
      • Network detection and response (NDR)
      • Sophos Switch
      • Sophos Wireless
    • Cloud Security
      • Sophos Central
      • Sophos Cloud Optix
    • Sophos Home Premium
      • Sophos Home portal
    • Support Tools
      • Sophos integrations
      • Free tools
  • Services
    • Management platform
      • Sophos Central - sign in
      • Support portal - sign in
      • Community - sign in
  • Sophos Partners
    • Partners Corner
    • Partner blogs
    • Websinars and Events
  • Member Recognition
    • Community Leaderboards
    • Sophos Central login
    • Partner care
  • Become a partner
    • Join our program
  • Sophos Community: Getting started
    • How to get started
    • Frequently Asked Questions (FAQs)
    • SophosID Registration
    • How to contribute and participate
    • How to set up your profile
  •  
    • How to manage friends
    • How to manage private messages
    • How to manage digests, subscriptions, and notifications
    • Terms and Conditions of Use
  • Products and Services
    • Products
      • Endpoint Security
        • Endpoint protection - next-gen antivirus
        • Endpoint detection and response (XDR)
        • Mobile security
      • Email Security
        • Sophos Email
        • Phish Threat
      • Network Security
        • Sophos Firewall
        • UTM firewall
        • Zero trust network access (ZTNA)
        • Network detection and response (NDR)
        • Sophos Switch
        • Sophos Wireless
      • Cloud Security
        • Sophos Central
        • Sophos Cloud Optix
      • Sophos Home Premium
        • Sophos Home portal
      • Support Tools
        • Sophos integrations
        • Free tools
    • Services
      • Management platform
        • Sophos Central - sign in
        • Support portal - sign in
        • Community - sign in
  • Community Blogs
    • Blogs List 1
      • Sophos Community Blog
      • Sophos Endpoint
      • Sophos Firewall
      • Zero Trust Network Access
      • Sophos Switch
      • UTM Firewall
      • Sophos Wireless
      • Sophos Central
      • Sophos Cloud Optix
      • Sophos Central API
      • Sophos Factory
      • Sophos Email
    • Blogs List 2
      • Phish Threat
      • Sophos XDR
      • Sophos Mobile
      • On-Premise Endpoint
      • Encryption
      • Sophos Partners
      • Support Portal Feedback
      • Product Documentation Blog
      • SophosLabs
      • Free Tools
      • Sophos Integrations
  • Partners
    • Sophos Partners
      • Partners Corner
      • Partner blogs
      • Websinars and Events
    • Member Recognition
      • Community Leaderboards
      • Sophos Central login
      • Partner care
    • Become a partner
      • Join our program
  • Support Portal
  • Get started
    • Sophos Community: Getting started
      • How to get started
      • Frequently Asked Questions (FAQs)
      • SophosID Registration
      • How to contribute and participate
      • How to set up your profile
      • How to manage friends
      • How to manage private messages
      • How to manage digests, subscriptions, and notifications
      • Terms and Conditions of Use
Windows Endpoint EAP
  • Sophos Endpoint
  • More

Windows Endpoint EAP

  • Announcements
  • Recommended Reads
  • Feedback & Issues
  • Live Discover Query Forum
  • Files
  • More
  • Cancel
  • New
Windows Endpoint EAP requires membership for participation - click to join
Quick Links
⁃ Back to Intercept X Main Group
⁃ EAP Files
⁃ Member List
Getting Started
⁃ Recommended Reads
⁃ Live Discover Queries
Subscribe to Sophos Notifications Follow us on Twitter Connect with us on Facebook Join us on Reddit
Announcements
  • How to find and use the Schema for Live Discovery Queries

    How to find and use the Schema for Live Discovery Queries

    Karl_Ackerman
    Karl_Ackerman

    For query assistance, please see the following Best Practices guide

    While we have the schema posted on…

    • 19 May 2020
  • Intercept X with EDR EAP - Variable support for queries

    Intercept X with EDR EAP - Variable support for queries

    Karl_Ackerman
    Karl_Ackerman

    Starting on the week of may 18 we will be adding variable support to queries.

    You can create queries…

    • 15 May 2020
  • Intercept X with EDR EAP  Update - Adding Create/Save/Edit Queries

    Intercept X with EDR EAP Update - Adding Create/Save/Edit Queries

    Karl_Ackerman
    Karl_Ackerman

    The week of May 18 we will be turning on two powerful new capabilities in the EAP, Edit Query and Query…

    • 15 May 2020
<>
Latest Endpoint EAP Recommended Reads
  • Discussion

    December EAP Update, Updated Known Issues List

    1732 views
    0 replies
    Started over 5 years ago
    by Vincent Vanbiervliet
  • Discussion

    Updated Known Issues List - January 2020

    1824 views
    0 replies
    Started over 4 years ago
    by Vincent Vanbiervliet
  • Discussion

    Known Issues with AMSI and IPS EAP (Updated 3 December 2019)

    12108 views
    11 replies
    Latest over 4 years ago
    by Pedro Mosna
  • Discussion

    Known Issues with AMSI and IPS EAP (Updated 4 March 2020)

    1955 views
    0 replies
    Started over 4 years ago
    by Vincent Vanbiervliet
  • Discussion

    Windows 7 requirements for February 2020 EAP Update

    5332 views
    2 replies
    Latest over 4 years ago
    by jak
<>
Latest Community Questions in Endpoint EAP
  • Discussion

    Announcing the Early Access Program for IPS and AMSI Locked

    2265 views
    0 replies
    Started over 5 years ago
    by Vincent Vanbiervliet
  • Discussion

    [Sophos Notification] Sophos Snort service may not be running after joining EAP

    4334 views
    0 replies
    Started over 5 years ago
    by FloSupport
  • Not Answered

    AMSI exception in global exclusions 0

    2917 views
    1 reply
    Latest over 5 years ago
    by Vincent Vanbiervliet
  • Discussion

    How to test IPS

    6193 views
    0 replies
    Started over 5 years ago
    by Vincent Vanbiervliet
  • Answered

    Will endpoint block phishing sites? +1

    7326 views
    1 reply
    Latest over 5 years ago
    by Vincent Vanbiervliet
  • Not Answered

    Why does the new setting prevent wireless connections? 0

    3654 views
    2 replies
    Latest over 5 years ago
    by Vincent Vanbiervliet
  • Discussion

    IPS Wi-Fi issues: Affected Wi-Fi adapters

    2605 views
    0 replies
    Started over 5 years ago
    by Vincent Vanbiervliet
  • Not Answered

    No internet access on GSM connection 0

    3313 views
    1 reply
    Latest over 5 years ago
    by Vincent Vanbiervliet
  • Answered

    New Version released and installed... any updates as to fixes in this version? +2

    11577 views
    8 replies
    Latest over 5 years ago
    by StephenMcKay
  • Discussion

    Updated Known Issues List 29 October 2019 / IPS causes issues with wireless network adapters

    12345 views
    11 replies
    Latest over 5 years ago
    by Vincent Vanbiervliet
  • Discussion

    December EAP Update, Updated Known Issues List

    1732 views
    0 replies
    Started over 5 years ago
    by Vincent Vanbiervliet
  • Not Answered

    DPC Watchdog Violation 0

    6891 views
    2 replies
    Latest over 4 years ago
    by StephenMcKay
  • Suggested Answer

    Intercept X EAP installed but Exploits succeeding in Sophos Tester!! 0

    9559 views
    2 replies
    Latest over 4 years ago
    by Vincent Vanbiervliet
  • Not Answered

    windows agent reporting services not running yet central shows OK 0

    6601 views
    7 replies
    Latest over 4 years ago
    by jak
  • Not Answered

    EAP Update rolling out - IPS WiFI Fix +1

    1407 views
    0 replies
    Started over 4 years ago
    by StephenMcKay
>
Files
  • RSS
  • More
  • Cancel

XDR - Detection and Investigation EAP Known Issues

SS Polyfilms Private Limited

Live Session Beta it is not responding

Live Discover Schema

4min video on query building

Building an advanced query 20 min

Live Response

Live Discover Tested with Caldera

Forensics Investigation with Live Discover

Threat Hunting with Live Discover

Live Discover IT operations

Device Selection for Live Discover

Joining the Early Access Program

Overview of Live Discover and Live Response

Enhanced Protection - Known Issues List 20 January 2020

Known Issues List for AMSI and IPS EAP - 2019-12-03.pdf

How to Join the Early Access Program

Related Tags
No tags have been created or used yet.
Unfiltered HTML
  • Getting started
  • Legal
  • Privacy
  • Cookies

© 1997 - 2024 Sophos Ltd. All rights reserved.