I am curious how Intercept X with EDR handles the "Sensor" data from the endpoint.
Reading what I have been able to find about this topic, it would seem that Sophos EDR works in a similar manner to McAfee MVision in that all the data is only stored on the endpoint.
Is there any capability to have this data automatically transmitted to a central server in a similar manner to the way Carbon Black and Crowdstrike work ?
This thread was automatically locked due to age.
