Scan for Sophos Connect 2.1 in S.Central

Hi Jacob,

Thanks for reaching out to the Sophos Community Forum

If you have a Sophos XDR License, you can use "Designer Mode" to create the following query.

SELECT name, version, install_location
FROM programs
WHERE name like 'Sophos Connect' and version != '2.2.90.1104'

Keep in mind that the live discover query will require the device to be online and communicating with Sophos Central for it to respond. 

Note: I've added this to our Live Discover and Response Query forum.

Thank you for this.