Email alerts for XDR detections

Hi Jonas Stadler ,

Thank you for reaching out to the Sophos Community Forum.

Do you have a Super Admin role on Sophos Central? The Investigations section in the Threat Analysis Center might help. Sophos automatically creates an investigation when there's a high-risk detection, and you can also create your own investigations. By default, notifications for these are sent to Super Admins, but you may also change the settings by going into Preferences > Email notifications.

Does this help?

Hi Gladys ,

thanks for your reply. At what level of risk an investigation will be automatically generated?

Hi Jonas Stadler ,

Sophos creates investigations if there's a detection with risk level 6 or above.

You may also check out the following sections to know more about how this works.

How Sophos creates investigations

Create an investigation

Hi Jonas Stadler ,

Sophos creates investigations if there's a detection with risk level 6 or above.

You may also check out the following sections to know more about how this works.

How Sophos creates investigations

Create an investigation