So in the old architecture we looked for
C:\Program Files (x86)\Sophos\Sophos Anti-Virus\*.ide
and if those files have todays date then we know they have been updated. With the new architecture that folder is gone. What is one way to tell that the client is getting updates? Or has that gone away in leu of a better way of doing things?
Apparently that is not the directory as the files do not get updated after install. Well at least a week later it hasn't.
Another location you can use is the subdirectories under "C:\Program Files\Sophos\Sophos Standalone Engine\engine1\data". Signature files are no longer relied on as heavily in the scanning/decision-making process as Sophos has moved to a mainly ML scanning engine.
The location referenced by dirkkotte mentioned will be affected whenever there’s an ML engine update.
I actually found that just forgot to update the thread. Appreciate the help.