Sophos Central API

Discussions Detections/Investigations API

Sophos Central API requires membership for participation - click to join

Our Support phone number for India has changed. The old number will be deprecated as of October 31, 2023. Click here for the new phone number.

Sophos UTM: Decommissioning of obsolete URL categorization services CFFS. Click here for important info.

Thread Info

State Not Answered
+1 person also asked this people also asked this
Replies 2 replies
Subscribers 9 subscribers
Views 18011 views
Users 0 members are here

Options

Suggested

Detections/Investigations API

kevin robertson over 1 year ago

Hi there,

Has anyone managed to construct API queries to pull out Detections/Investigations from Sophos XDR at all?

We want these to be pushed into our ticketing platform as they are generated (or fetch them every 5 mins etc.) but I can't find any part of the API that can be used for this.

Seems like a necessary feature that's not available.

Can anyone shed any light?

Thanks