"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
This article provides information regarding the logging created and updated at 'runtime' by the Sophos Management Communication System (MCS).
Note: For details on the installation log files of MCS see article 119621.
Applies to the following Sophos product(s) and version(s) Sophos CloudUTM Managed Endpoint (Windows 2000+)
they are found in the directory:
The common characteristics of the log files are as follows:
Specific information for each is as follows:
The logging for MCS on Mac may need to be enabled on the computer. To do so:
sudo syslog -c 0 -d
sudo syslog -c 0 off
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.