This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Export XDR / EDR data from Sophos intercept X to SIEM platform

Hi,

I need to be able to pull the telemetry from Sophos Intercept X into my SIEM. I am currently using the GitHub project linked below to pull alerts into the SIEM, but I need the raw telemetry. Is this possible yet? This is an old thread that was asking for the same - community.sophos.com/.../sending-process-creation-logs-to-siem 

https://github.com/sophos/Sophos-Central-SIEM-Integration

Thanks,

Jeremy



This thread was automatically locked due to age.