Sophos Community
User
Site
Search
User
Toggle Mobile menu
Community & Product Forums
Community Blogs
Partners
Support Portal
Get started
Blogs
Sophos Community Blog
Sophos Endpoint
Sophos Firewall
Zero Trust Network Access
Sophos Switch
UTM Firewall
Sophos Wireless
Sophos Central
Sophos Cloud Optix
Sophos Central API
Sophos Factory
Sophos Email
Phish Threat
Sophos XDR
Sophos Mobile
On-Premise Endpoint
Encryption
Sophos Partners
Support Portal Feedback
Product Documentation Blog
SophosLabs
Free Tools
Sophos Integrations
Products
Endpoint Security
Endpoint protection - next-gen antivirus
Endpoint detection and response (XDR)
Mobile security
Email Security
Sophos Email
Phish Threat
Network Security
Sophos Firewall
UTM firewall
Zero trust network access (ZTNA)
Network detection and response (NDR)
Sophos Switch
Sophos Wireless
Cloud Security
Sophos Central
Sophos Cloud Optix
Sophos Home Premium
Sophos Home portal
Support Tools
Sophos integrations
Free tools
Services
Management platform
Sophos Central - sign in
Support portal - sign in
Community - sign in
Sophos Partners
Partners Corner
Partner blogs
Webinars and Events
Member Recognition
Community Leaderboards
Sophos Central login
Partner care
Become a partner
Join our program
Sophos Community: Getting started
How to get started
Frequently Asked Questions (FAQs)
SophosID Registration
How to contribute and participate
How to set up your profile
How to manage friends
How to manage private messages
How to manage digests, subscriptions, and notifications
Terms and Conditions of Use
Products and Services
Products
Endpoint Security
Endpoint protection - next-gen antivirus
Endpoint detection and response (XDR)
Mobile security
Email Security
Sophos Email
Phish Threat
Network Security
Sophos Firewall
UTM firewall
Zero trust network access (ZTNA)
Network detection and response (NDR)
Sophos Switch
Sophos Wireless
Cloud Security
Sophos Central
Sophos Cloud Optix
Sophos Home Premium
Sophos Home portal
Support Tools
Sophos integrations
Free tools
Services
Management platform
Sophos Central - sign in
Support portal - sign in
Community - sign in
Community Blogs
Blogs List 1
Sophos Community Blog
Sophos Endpoint
Sophos Firewall
Zero Trust Network Access
Sophos Switch
UTM Firewall
Sophos Wireless
Sophos Central
Sophos Cloud Optix
Sophos Central API
Sophos Factory
Sophos Email
Blogs List 2
Phish Threat
Sophos XDR
Sophos Mobile
On-Premise Endpoint
Encryption
Sophos Partners
Support Portal Feedback
Product Documentation Blog
SophosLabs
Free Tools
Sophos Integrations
Partners
Sophos Partners
Partners Corner
Partner blogs
Webinars and Events
Member Recognition
Community Leaderboards
Sophos Central login
Partner care
Become a partner
Join our program
Support Portal
Get started
Sophos Community: Getting started
How to get started
Frequently Asked Questions (FAQs)
SophosID Registration
How to contribute and participate
How to set up your profile
How to manage friends
How to manage private messages
How to manage digests, subscriptions, and notifications
Terms and Conditions of Use
Sophos Endpoint
More
XDR Features EAP
Discussions
Announcements
Discussions
Files
Queries
More
Cancel
New
XDR Features EAP requires membership for participation - click to join
Tags
RSS
More
Cancel
Suggested
Recent Conversations
By title
By last reply date
By thread date
By reply count
By view count
By most asked
By votes
By quality
Descending
Ascending
All recent questions and discussions
Unanswered questions and discussions
Answered questions and discussions
Questions with suggested answers
Questions and discussions with no replies
Answered
Add Windows OS version to Windows programs (Data Lake) query
+1
5740
views
9
replies
Latest
over 2 years ago
by
IsmailJaweed
Discussion
Getting Started: Installing Caldera test tool and using Live Discover for threat hunting
3970
views
1
reply
Latest
over 3 years ago
by
j0hnV
Discussion
How do I check the logic for a classification rule if I suspect it is a False Positive?
1508
views
0
replies
Started
over 3 years ago
by
Karl_Ackerman
Not Answered
Someone was able to help me and change this query to the DataLake context?
0
1499
views
1
reply
Latest
over 3 years ago
by
Rafael Moura
Not Answered
Data Lake scheduled query high CPU usage
0
1198
views
0
replies
Started
over 3 years ago
by
Evan Allen
Not Answered
Creating Custom Queries on Sophos
0
2298
views
1
reply
Latest
over 3 years ago
by
GlennSen
Not Answered
Sophos Customize reports required
0
2052
views
3
replies
Latest
over 3 years ago
by
GlennSen
Not Answered
Live Discover - "Invalid operation error". DataLake community query failing
0
979
views
0
replies
Started
over 3 years ago
by
AndyR
Not Answered
problem data lake
0
3837
views
2
replies
Latest
over 3 years ago
by
Kevin Kingston
Not Answered
Questions on use cases and frequently used queries
0
2282
views
2
replies
Latest
over 3 years ago
by
Kevin Kingston
Discussion
Getting Started: Pivoting on Live Discover Query Results
2117
views
0
replies
Started
over 3 years ago
by
Jack L
Discussion
Getting Started: Enrolling Devices & Running Queries
1166
views
0
replies
Started
over 3 years ago
by
Jack L
Not Answered
Is the data lake slower today March 8 2021?
0
1608
views
1
reply
Latest
over 3 years ago
by
Karl_Ackerman
Not Answered
Relative time in query
0
2458
views
3
replies
Latest
over 3 years ago
by
Alistair Knowles
Not Answered
After adding XDR machines show offline in Central
0
3454
views
6
replies
Latest
over 4 years ago
by
j0hnV
Discussion
Pagination
1861
views
2
replies
Latest
over 4 years ago
by
Karl_Ackerman
Not Answered
Test Tool, have you been able to get it to install?
0
2774
views
4
replies
Latest
over 4 years ago
by
j0hnV
Not Answered
Datapoint - Upload Size
0
1565
views
1
reply
Latest
over 4 years ago
by
Karl_Ackerman
Discussion
Welcome to the EDR Data Lake Discussion Forum!
Locked
1207
views
0
replies
Started
over 4 years ago
by
Kevin Kingston