This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Where can I find details for Ransomware alerts?

I received a Ransomware alert yesterday for one of our customers. However it does not tell me what file triggered the alert. Does anyone know where I can find this? This is the second time we have gotten an alert and I have not been able to investigate the cause. All it tells me is the IP of the machine the infection originated from.

This thread was automatically locked due to age.

Parents

0 Barb@Sophos over 5 years ago

Hello David Lambert,

Please have a look at the following entries in order to find more information:

Sophos Central: Root Cause Analysis overview

Root Cause Analysis: Malicious behavior

Also, you can check your Windows Event viewer for any 911 events containing more information.

Regards,

Barb@Sophos
Community Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Barb@Sophos over 5 years ago

Hello David Lambert,

Please have a look at the following entries in order to find more information:

Sophos Central: Root Cause Analysis overview

Root Cause Analysis: Malicious behavior

Also, you can check your Windows Event viewer for any 911 events containing more information.

Regards,

Barb@Sophos
Community Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data