Need help in building OS Query for Finding SHA1 andSHA256

Question

Hello All, 
 I have been trying to create custom queries in Sophos Central for finding IoCs (SHA1 and SHA256). 
 Can you please help me build query for the same? 
 
 Regards, 
 Jenil

Qoosh · Answer

Hi Jenil , 
 I suggest checking the following request we've received previously, as this should give you a good starting place to create this query. - Live Discover and Response Query Forum > Threat Hunting

Need help in building OS Query for Finding SHA1 andSHA256

Top Replies