Sophos Community
User
Site
Search
User
Toggle Mobile menu
Community & Product Forums
Blogs
Partners
Events & Webinars
Getting Started
Support Portal
Community Blogs
Application Control
Community
Product documentation
Security
Feedback
Support Portal
Product documentation
Products
Endpoint security
Sophos Endpoint
Sophos XDR
Sophos Mobile
Network Security
Sophos Firewall
ZTNA
Sophos Switch
UTM Firewall
Sophos Wireless
NDR
Email Security
Sophos Email
Phish Threat
Cloud Security
Sophos Central
Sophos Cloud Optix
Support Tools
Sophos integrations
Free tools
Services
Management platform
Sophos Central
Support Portal
Sophos Community log in
Sophos Partners
Partners blog
Local Partner community
Partner news
Resources
MSP guides
Partner Care
Sophos Central
Webinars & Events
Webinars & Events
Calendar
Become a partner
Join our program
Events & Webinars
Events & Webinars
Calendar
Getting started in the Community
How to get started
SophosID registration
How to set up your profile
How to contribute and participate
How to manage private messages
Member recognition
Rewards program
Leaderboard
Products and Services
Products
Endpoint security
Sophos Endpoint
Sophos XDR
Sophos Mobile
Network Security
Sophos Firewall
ZTNA
Sophos Switch
UTM Firewall
Sophos Wireless
NDR
Email Security
Sophos Email
Phish Threat
Cloud Security
Sophos Central
Sophos Cloud Optix
Support Tools
Sophos integrations
Free tools
Services
Management platform
Sophos Central
Support Portal
Sophos Community log in
Blogs
Community Blogs
Application Control
Community
Product documentation
Security
Feedback
Support Portal
Product documentation
Partners
Sophos Partners
Partners blog
Local Partner community
Partner news
Resources
MSP guides
Partner Care
Sophos Central
Webinars & Events
Webinars & Events
Calendar
Become a partner
Join our program
Events & Webinars
Events & Webinars
Events & Webinars
Calendar
Getting Started
Getting started in the Community
How to get started
SophosID registration
How to set up your profile
How to contribute and participate
How to manage private messages
Member recognition
Rewards program
Leaderboard
Support Portal
Sophos Endpoint
More
XDR Features EAP
Discussions
Announcements
Discussions
Files
Queries
More
Cancel
New
XDR Features EAP requires membership for participation - click to join
Tags
RSS
More
Cancel
Suggested
Recent Conversations
By title
By last reply date
By thread date
By reply count
By view count
By most asked
By votes
By quality
Descending
Ascending
All recent questions and discussions
Unanswered questions and discussions
Answered questions and discussions
Questions with suggested answers
Questions and discussions with no replies
Answered
Add Windows OS version to Windows programs (Data Lake) query
+1
5830
views
9
replies
Latest
over 2 years ago
by
IsmailJaweed
Discussion
Getting Started: Installing Caldera test tool and using Live Discover for threat hunting
4056
views
1
reply
Latest
over 3 years ago
by
j0hnV
Discussion
How do I check the logic for a classification rule if I suspect it is a False Positive?
1527
views
0
replies
Started
over 3 years ago
by
Karl_Ackerman
Not Answered
Someone was able to help me and change this query to the DataLake context?
0
1524
views
1
reply
Latest
over 3 years ago
by
Rafael Moura
Not Answered
Data Lake scheduled query high CPU usage
0
1218
views
0
replies
Started
over 3 years ago
by
Evan Allen
Not Answered
Creating Custom Queries on Sophos
0
2318
views
1
reply
Latest
over 3 years ago
by
GlennSen
Not Answered
Sophos Customize reports required
0
2090
views
3
replies
Latest
over 3 years ago
by
GlennSen
Not Answered
Live Discover - "Invalid operation error". DataLake community query failing
0
998
views
0
replies
Started
over 3 years ago
by
AndyR
Not Answered
problem data lake
0
3868
views
2
replies
Latest
over 3 years ago
by
Kevin Kingston
Not Answered
Questions on use cases and frequently used queries
0
2303
views
2
replies
Latest
over 3 years ago
by
Kevin Kingston
Discussion
Getting Started: Pivoting on Live Discover Query Results
2215
views
0
replies
Started
over 3 years ago
by
Jack L
Discussion
Getting Started: Enrolling Devices & Running Queries
1185
views
0
replies
Started
over 3 years ago
by
Jack L
Not Answered
Is the data lake slower today March 8 2021?
0
1631
views
1
reply
Latest
over 3 years ago
by
Karl_Ackerman
Not Answered
Relative time in query
0
2495
views
3
replies
Latest
over 4 years ago
by
Alistair Knowles
Not Answered
After adding XDR machines show offline in Central
0
3491
views
6
replies
Latest
over 4 years ago
by
j0hnV
Discussion
Pagination
1882
views
2
replies
Latest
over 4 years ago
by
Karl_Ackerman
Not Answered
Test Tool, have you been able to get it to install?
0
2801
views
4
replies
Latest
over 4 years ago
by
j0hnV
Not Answered
Datapoint - Upload Size
0
1582
views
1
reply
Latest
over 4 years ago
by
Karl_Ackerman
Discussion
Welcome to the EDR Data Lake Discussion Forum!
Locked
1216
views
0
replies
Started
over 4 years ago
by
Kevin Kingston