Sophos Community
Sophos Community
  • Site
  • User
  • Site
  • Search
  • User
  • All Groups
    • Intercept X Endpoint
    • XG Firewall
    • UTM Firewall
    • Sophos Partners
    • Community Chat
    • Support Portal
    • Product Documentation
  • Community Blogs & Events
    • Community Calendar
    • Sophos Community Blog
    • Community Security Blog
  • Getting Started
  • Member Recognition
    • Community Leaderboards
    • Sophos Partner Recognition
  • Technical Support Videos
  • Product Documentation
    • Feedback on Product Documentation
  • Support Portal
    • Sophos.com
  • More
  • Cancel
EDR Data Lake EAP
  • Intercept X Endpoint
  • More
EDR Data Lake EAP

Files

  • Announcements
  • Discussions
  • Files
  • Queries
  • More
  • Cancel
  • New
EDR Data Lake EAP requires membership for participation - click to join
  • View slideshow
  • RSS
  • More
  • Cancel

Sophos Endpoint Data Lake Schema

Sophos Windows Extension Schema

OSQuery 4.5.1 Schema

Endpoint Query Pack

query to list endpoint tables in the data lake

query to list recently installed applications

query to list IE extensions

query to list homebrew packages

query to list firefox addons

query to list deb packages

query to list chrome extensions

query to list executable file changes

query to list browser plugins

QUERY to list arp_cache info

Joining the EDR Data Lake Early Access Program

DATA LAKE Schema - Endpoint Data

EDR Data Lake Test Tool

Unfiltered HTML
  • Getting started
  • Legal
  • Privacy
  • Cookies

© 1997 - 2021 Sophos Ltd. All rights reserved.