This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

PUA files download

Dear development team,

A PUA has been detected, but the filename or hash does not provide details.

I want to restore the file to check the details, but I cannot restore it unless I allow it from the event on the device management screen.

It is dangerous to suddenly allow PUAs whose details are unknown, so we need a function to download files.

Best regards,



This thread was automatically locked due to age.
Parents
  • Hi ,

    Thank you for reaching out to the Sophos Community Forum. If you need to review the details of a detected PUA, and you have an Intercept X or Intercept X Advanced with XDR license, you may check if there's a threat graph.

    In Sophos Central, go to Threat Analysis Center. If there's an associated threat graph with the detected PUA, it'll show the details including any activity it has performed and whether there are other suspicious files or processes to investigate.

    If you need more information regarding the Threat Graph analysis, you may also refer to this article.

    I hope this helps.


    Gladys Reyes
    Global Community Support Engineer
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
Reply
  • Hi ,

    Thank you for reaching out to the Sophos Community Forum. If you need to review the details of a detected PUA, and you have an Intercept X or Intercept X Advanced with XDR license, you may check if there's a threat graph.

    In Sophos Central, go to Threat Analysis Center. If there's an associated threat graph with the detected PUA, it'll show the details including any activity it has performed and whether there are other suspicious files or processes to investigate.

    If you need more information regarding the Threat Graph analysis, you may also refer to this article.

    I hope this helps.


    Gladys Reyes
    Global Community Support Engineer
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
Children