Hello everyone,
Is it possible to set up an email alert for high risk XDR detections (no MDR-costumer) ? I am talking about the detections in the "Threat Analysis Center".
For example, I want to be informed if a risk 6 or higher detection was found.
Hi Jonas Stadler ,
Thank you for reaching out to the Sophos Community Forum.
Do you have a Super Admin role on Sophos Central? The Investigations section in the Threat Analysis Center might help. Sophos automatically creates an investigation when there's a high-risk detection, and you can also create your own investigations. By default, notifications for these are sent to Super Admins, but you may also change the settings by going into Preferences > Email notifications.
Does this help?
Hi Jonas Stadler ,
Sophos creates investigations if there's a detection with risk level 6 or above.
You may also check out the following sections to know more about how this works.
