This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

live discovery query for: web browsing activity of MAC device


Please let us know if there is a sql query for get all web browsing activity of user/ computer for MAC devices on sophos central.

I found we have inbuilt query available for Windows as : "URLs accessed on Windows (Data Lake)".

Kindly let us know if there is an option on endpoint protection or any sophos products to get this report

This thread was automatically locked due to age.
  • Hi Hemanth,

    Thanks for reaching out to the Sophos Community Forum. 

    It looks like the data collected currently from macOS devices will not be sufficient to query the full browsing history on these devices. You can find more details on what information is collected and stored in the Data Lake on the following page. 
    - Sophos Schema

    To see specifically what data is accessible via queries, select the drop-down next to "Endpoint" and specify "Mac". This will take you to the osquery schema page. 
    - osquery Schema

    You may be able to get the data you're looking for if you have a Sophos Firewall deployed at the site where the concerned devices are present, but it does not look like this is currently possible with XDR on MacOS. 

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids