Sophos Community
Sophos Community
  • User
  • Site
  • Search
  • User
  • Community & Product Forums
  • Community Blogs
  • Partners
  • Support Portal
  • Get started
  • Blogs
    • Sophos Community Blog
    • Sophos Endpoint
    • Sophos Firewall
    • Zero Trust Network Access
    • Sophos Switch
    • UTM Firewall
    • Sophos Wireless
    • Sophos Central
    • Sophos Cloud Optix
    • Sophos Central API
    • Sophos Factory
    • Sophos Email
  •  
    • Phish Threat
    • Sophos XDR
    • Sophos Mobile
    • On-Premise Endpoint
    • Encryption
    • Sophos Partners
    • Support Portal Feedback
    • Product Documentation Blog
    • SophosLabs
    • Free Tools
    • Sophos Integrations
  • Products
    • Endpoint Security
      • Endpoint protection - next-gen antivirus
      • Endpoint detection and response (XDR)
      • Mobile security
    • Email Security
      • Sophos Email
      • Phish Threat
    • Network Security
      • Sophos Firewall
      • UTM firewall
      • Zero trust network access (ZTNA)
      • Network detection and response (NDR)
      • Sophos Switch
      • Sophos Wireless
    • Cloud Security
      • Sophos Central
      • Sophos Cloud Optix
    • Sophos Home Premium
      • Sophos Home portal
    • Support Tools
      • Sophos integrations
      • Free tools
  • Services
    • Management platform
      • Sophos Central - sign in
      • Support portal - sign in
      • Community - sign in
  • Sophos Partners
    • Partners Corner
    • Partner blogs
    • Webinars and Events
  • Member Recognition
    • Community Leaderboards
    • Sophos Central login
    • Partner care
  • Become a partner
    • Join our program
  • Sophos Community: Getting started
    • How to get started
    • Frequently Asked Questions (FAQs)
    • SophosID Registration
    • How to contribute and participate
    • How to set up your profile
  •  
    • How to manage friends
    • How to manage private messages
    • How to manage digests, subscriptions, and notifications
    • Terms and Conditions of Use
  • Products and Services
    • Products
      • Endpoint Security
        • Endpoint protection - next-gen antivirus
        • Endpoint detection and response (XDR)
        • Mobile security
      • Email Security
        • Sophos Email
        • Phish Threat
      • Network Security
        • Sophos Firewall
        • UTM firewall
        • Zero trust network access (ZTNA)
        • Network detection and response (NDR)
        • Sophos Switch
        • Sophos Wireless
      • Cloud Security
        • Sophos Central
        • Sophos Cloud Optix
      • Sophos Home Premium
        • Sophos Home portal
      • Support Tools
        • Sophos integrations
        • Free tools
    • Services
      • Management platform
        • Sophos Central - sign in
        • Support portal - sign in
        • Community - sign in
  • Community Blogs
    • Blogs List 1
      • Sophos Community Blog
      • Sophos Endpoint
      • Sophos Firewall
      • Zero Trust Network Access
      • Sophos Switch
      • UTM Firewall
      • Sophos Wireless
      • Sophos Central
      • Sophos Cloud Optix
      • Sophos Central API
      • Sophos Factory
      • Sophos Email
    • Blogs List 2
      • Phish Threat
      • Sophos XDR
      • Sophos Mobile
      • On-Premise Endpoint
      • Encryption
      • Sophos Partners
      • Support Portal Feedback
      • Product Documentation Blog
      • SophosLabs
      • Free Tools
      • Sophos Integrations
  • Partners
    • Sophos Partners
      • Partners Corner
      • Partner blogs
      • Webinars and Events
    • Member Recognition
      • Community Leaderboards
      • Sophos Central login
      • Partner care
    • Become a partner
      • Join our program
  • Support Portal
  • Get started
    • Sophos Community: Getting started
      • How to get started
      • Frequently Asked Questions (FAQs)
      • SophosID Registration
      • How to contribute and participate
      • How to set up your profile
      • How to manage friends
      • How to manage private messages
      • How to manage digests, subscriptions, and notifications
      • Terms and Conditions of Use
Sophos Endpoint

Sophos Endpoint

  • Release Notes & News
  • Discussions
  • Recommended Reads
  • Early Access Programs
  • Threat Hunting Academy
  • Live Discover Query Forum
  • More
  • Cancel
  • New
Sophos Endpoint requires membership for participation - click to join
Helpful Resources
⁃ Live Discover & Response Query Forum
⁃ Query Corner Announcement and Master Index
⁃ Best Practices On Using Live Discover & Response Query Forum
⁃ Sophos EDR Threat Hunting Framework
Latest Live Discover and Response Queries
  • LuCar Toni
    Live Discover Query for all DNS requests in a time frame with process (ZTNA App discover)
    Approved over 2 years ago
Subscribe to Sophos Notifications Follow us on X Connect with us on Facebook Join us on Reddit URL Reassessment
Sophos Endpoint Blog Posts
  • Exploring Windows Events and Security groups  with Live Discover

    Announcements: Exploring Windows Events and Security groups with Live Discover

    Karl_Ackerman
    Karl_Ackerman

    For query assistance, please see the following Best…

    • 6 Jul 2020
  • Detecting Glupteba malware with Sophos EDR

    Announcements: Detecting Glupteba malware with Sophos EDR

    Seth Geftic
    Seth Geftic

    Last week SophosLabs published a report about the Glupteba…

    • 29 Jun 2020
  • Intercept X Advanced with EDR: Start using the powerful new EDR features

    Release Notes & News: Intercept X Advanced with EDR: Start using the powerful new EDR features

    Kevin Kingston
    Kevin Kingston

    We are thrilled to announce that the latest version 

    …
    • 19 Jun 2020
<>
Latest Sophos Endpoint Recommended Reads
  • Discussion

    Detection Trendlines

    3305 views
    0 replies
    Started over 2 years ago
    by Karl_Ackerman
  • Discussion

    XDR Academy 2021 Sample queries and scripts

    7308 views
    1 reply
    Latest over 2 years ago
    by Melissa
  • Discussion

    Exploring what you can do with the new XDR Detections table (xdr_ti_data)

    5229 views
    1 reply
    Latest over 3 years ago
    by Matthew Ritchie
  • Discussion

    Sophos Central Endpoint: Wonder Series - How to determine if the Web Control policy has reached the managed endpoint devices

    6249 views
    1 reply
    Latest over 3 years ago
    by Sophos User930
  • Discussion

    Sophos Central Operations Guide: Intercept X Advanced with XDR

    33353 views
    5 replies
    Latest over 3 years ago
    by Mark Knights
<>
Latest Community Discussions in Sophos Endpoint
  • Not Answered

    Block a specific file name 0 Locked

    5621 views
    0 replies
    Started over 9 years ago
    by StephenReboulet
  • Answered

    Group Policy deploy - computer startup script failing +1 Locked

    12310 views
    1 reply
    Latest over 9 years ago
    by ICT123
  • Not Answered

    Log User Web Activity without Warning 0 Locked

    6642 views
    1 reply
    Latest over 9 years ago
    by QC
  • Not Answered

    Sophos Cloud and Mobile Security 0 Locked

    2693 views
    0 replies
    Started over 9 years ago
    by Mauri
  • Not Answered

    Error code 147 0 Locked

    3091 views
    0 replies
    Started over 9 years ago
    by uSwITOps
  • Not Answered

    add PCs/Servers to groups? 0 Locked

    7485 views
    2 replies
    Latest over 9 years ago
    by messagetrust
  • Not Answered

    Migrating from SEC/Endpoint to Cloud - guide? 0 Locked

    18448 views
    4 replies
    Latest over 9 years ago
    by ICT123
  • Not Answered

    Scheduling Mac cloud updates 0 Locked

    2722 views
    0 replies
    Started over 9 years ago
    by orangehand
  • Answered

    Download of ESHSXP failed from server 0 Locked

    12950 views
    3 replies
    Latest over 9 years ago
    by jak
  • Answered

    Sophos AV still detected after removal on Windows Servers 0 Locked

    11279 views
    2 replies
    Latest over 9 years ago
    by Benny_M
  • Not Answered

    does I delete Sophos cloud account 0 Locked

    12470 views
    2 replies
    Latest over 9 years ago
    by Mystery4u
  • Not Answered

    Scanning Exclusions problems 0 Locked

    16140 views
    3 replies
    Latest over 9 years ago
    by ComputerOne
  • Not Answered

    Installing on Windows 10 preview fails 0 Locked

    9354 views
    1 reply
    Latest over 9 years ago
    by jlhuge
  • Not Answered

    Licencing multiple customers for resellers 0 Locked

    2452 views
    0 replies
    Started over 9 years ago
    by test6565656
  • Not Answered

    Installation of Sophos Cloud on existing Microsoft System Center 2012 Endpoint Protection computers 0 Locked

    4458 views
    0 replies
    Started over 9 years ago
    by truckman
<>
Related Tags
  • Central Endpoint (Windows)
  • Device Management (Windows Endpoint)
  • Endpoint
  • Endpoint & Server Protection
  • Intercept X
  • Miscellaneous
  • Scanning/Detections
  • Sophos Central
  • Sophos Central Endpoint
  • Sophos Cloud
Unfiltered HTML
  • Getting started
  • Legal
  • Privacy
  • Cookies

© 1997 - 2024 Sophos Ltd. All rights reserved.