Sophos Endpoint

Files show devices where exist a file with a specific hash

Sophos Endpoint requires membership for participation - click to join

Complete

over 2 years ago

show devices where exist a file with a specific hash

Hello,

I would like to know if it is possible to make a query to show devices where there is a specific file in the Data Lake.

Thank you

Giulia Zambetti

Top Comments

JeramyKopacko over 2 years ago +1

We do not store that information in the DataLake at this time. You can try this canned query to get some information: " Network activity of a process with a specific SHA -256 ( Data Lake ) and Process…

Parents

JeramyKopacko over 2 years ago

We do not store that information in the DataLake at this time. You can try this canned query to get some information: "Network activity of a process with a specific SHA-256 (Data Lake) and Process activity for a SHA-256 (Data Lake)"
- Cancel
- Vote Up +1 Vote Down
- More
- Cancel

Comment

JeramyKopacko over 2 years ago

We do not store that information in the DataLake at this time. You can try this canned query to get some information: "Network activity of a process with a specific SHA-256 (Data Lake) and Process activity for a SHA-256 (Data Lake)"
- Cancel
- Vote Up +1 Vote Down
- More
- Cancel

Children

No Data