This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[Latest KB's] Sophos Intercept X Advanced with EDR: How to Enable Authentication Events

Hey Community,

This Knowledgebase Article provides a step-by-step on how to enable audit events for Windows Authentication. This allows our EDR Forensic snapshots to contain more information in regards to logon events.

Cheers,



This thread was automatically locked due to age.