This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos File Scanning WSL1

Does the Sophos File scanner scan files in a WSL1 installation?

Those files are available to Windows at \\wsl.localhost\

Thank you,

Carlton



This thread was automatically locked due to age.
Parents Reply Children
  • Thank you Qoosh. Although I am running WSL1 and not WSL2, do you happen to know whether or not it is scanned as well? Those files are available at the same location to Windows, but I believe WSL2 runs using Hyper-V.

  • It looks like I am running Version 2. While testing and interacting with the files directly using WSL within the \\wsl folder, I was not able to generate any detections.

    When using /mnt to move to the C: drive to interact with files, I was able to generate detections.

    If I were to use the Windows File explorer to browse the files in the \\wsl, this too generated detections.

    If an application were to execute within WSL, the moment it begins affecting the Windows filesystem, I expect you'd see the same. You may want to create a case to inquire into this a bit further as it's unclear if Sophos' filter drivers are truly inspecting all of the operations that occur within the WSL specifically. 

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids