Under this API - https://developer.sophos.com/docs/siem-v1/1/routes/alerts/get, there is a value returned which is 'type' and it has such example replies such as 'Event::Endpoint::OutOfDate' - does anyone have a full list of these values exactly? As in, what are the other options available?
Thanks for reaching out to the Sophos Community Forum.
You can find the full list in the following article. - Event types and descriptions for Sophos Central API