Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 13 subscribers
  • Views 1990 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos File Scanning WSL1

Carlton Jacobson

Does the Sophos File scanner scan files in a WSL1 installation?

Those files are available to Windows at \\wsl.localhost\

Thank you,

Carlton



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Qoosh

    Thank you Qoosh. Although I am running WSL1 and not WSL2, do you happen to know whether or not it is scanned as well? Those files are available at the same location to Windows, but I believe WSL2 runs using Hyper-V.

  • 0 in reply to Carlton Jacobson

    It looks like I am running Version 2. While testing and interacting with the files directly using WSL within the \\wsl folder, I was not able to generate any detections.

    When using /mnt to move to the C: drive to interact with files, I was able to generate detections.

    If I were to use the Windows File explorer to browse the files in the \\wsl, this too generated detections.

    If an application were to execute within WSL, the moment it begins affecting the Windows filesystem, I expect you'd see the same. You may want to create a case to inquire into this a bit further as it's unclear if Sophos' filter drivers are truly inspecting all of the operations that occur within the WSL specifically. 

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
Unfiltered HTML