Sophos Endpoint Data Lake Schema

Sophos Windows Extension Schema

OSQuery 4.5.1 Schema

Endpoint Query Pack

query to list endpoint tables in the data lake

query to list recently installed applications

query to list IE extensions

query to list homebrew packages

query to list firefox addons

query to list deb packages

query to list chrome extensions

query to list executable file changes

query to list browser plugins

QUERY to list arp_cache info

Joining the EDR Data Lake Early Access Program

DATA LAKE Schema - Endpoint Data

EDR Data Lake Test Tool

Unfiltered HTML