Announcements

NDR Live Discover Category and a set of 23 reports are now available for all NDR customers. This update allows you to explore the NDR data and flow based detections. Video: https://vimeo.com/manage/videos/831535844 From the Central Threat Analysis Ce...

If you run into issues with a log collector or NDR Sensor and call Sophos support for assistance you can now enable remote assist to allow them direct access to the Data Collector. Sophos Support: https://www.sophos.com/en-us/support Sophos supp...

Sophos Network Detection and Response (NDR) uses encrypted packet analysis to identify new command and control (C2) servers as they emerge. Unlike traditional IOC-based detection, which relies on known indicators of compromise, our model performs con...

As malware continues to evolve and adversaries become more adept at evading detection, dynamic AI and machine learning technologies are critical for detection of the latest threats and attacks.  Sophos NDR utilizes a series of machine learning m...

Sophos NDR and Log Collectors now support Microsoft Hyper-V deployment We're excited to announce that Sophos Network Detection and Response (NDR) and Log Collectors now support Microsoft Hyper-V deployment options. This means that all accounts with a...

At Sophos, we're always working to improve NDR by adding new customer-facing features. Below, you'll find a high-level overview of the features currently under development, which will be available this summer and fall. While NDR is currently availabl...

We're pleased to report that NDR is now active at hundreds of accounts, and we're seeing some impressive detections as a result. We're excited to share some real-world examples of how our MDR operations team has been able to leverage the NDR Sensor t...

In this draft document John Limb discusses the Sophos NDR solution and each of the components.  The document is proceeding through final editing and an updated version will be available shortly.  The document covers each of the detecti...

In this video John Limb covers the installation and configuration of Sophos NDR on Microsoft Hyper-v This is a 6 min video and covers everything from adding the NDR integration in Sophos Central to deploying and starting the NDR Sensor os Hyper-V Vid...

We are increasing the deployment options for virtual appliances to host the Sophos NDR Sensor and log collectors for 3rd party integrations The addition of support for MS Hyper-V will allow customers to choose between the existing VMWare virtual app...

The Sophos Network Detection and Response performs analytics on network flows and will generate a detection in the Threat Analysis center when suspect activity is found. These detections can easily be reviewed by setting the Classification Rule filte...

With the Sophos Network Detection and Response sensor deployed you are already getting notifications in the Detections console for malicious activity observed in the network flows.  We have added a series of statistics reports to the NDR sensor ...

Sophos NDR identifies rogue assets, unprotected devices, insider threats, and novel attacks to accelerate threat detection and response. We recently launched Sophos Network Detection and Response (NDR) and it’s already providing real-...