Announcements
    • 26 May 2020

    New Sophos Table - Sophos_process_activity

    We have added a new table to the sophos forensics journals. The sophos_process_activity table. Often as part of an investigation you need to to get a quick view of what a process did in the past and this table provides a quick lookup location for that information. This table contains a subject for each of the other Sophos 'journals' and collects some of the more useful information like Registry Key/Values...
Latest Community Questions in Endpoint EAP
Files