How can I add IOCs into Sophos?
I saw a response where you can query for the IOCs. I may have understood but that would mean that I would have to query every single IOC and that would be time-consuming.
Does Sophos have the capability to integrate IOCs uploaded by end user (administrator account)?
Hello There,Thank you for reaching out to the community forum. This is not applicable to our Sophos Enterprise Console. Though this can be done through Sophos central.
For more information about IOCs, I'll be sharing this documentation.