Knowledge Base

Tracking down what process is responsible for resource consumption or usage spikes

Use DebugView to capture trace/debug information on screen and save to a log file.

Sophos Technical Support may require to investigate what files and registry keys are being accessed by an application. In these events, we will request that you gather a Process Monitor log for us.

This article explains how to view the Event ID data from Sophos Anti-Virus for use in third party event log monitoring applications.

Microsoft have included a tool called Problem Steps Recorder (psr.exe), this tool captures a series of screenshots and the actions a user performs into a set of steps, this can be very useful in explaining complex issues.

Sophos Diagnose may have trouble acquiring the Group Policy applied to the computer if it is disconnected from the Domain, there is a modified config file for Sophos Diagnose that skips this task.

Check disk space, logged on account, temporary folder permissions or override default output location.

How to acquire a diagnose log set with malware information with the malware switch when using the SDU

With the aid of the task scheduler you can run the SDU tool from the server to collect logs on a client

Running sducli from the command line to collect logs for troubleshooting