It happens now and then that the Endpoint finds a PUA or something else that (for some reason) it cant clean by it self.
Sometimes it is actually gone so you cant manually clean it either.
So a included script in the integration to clean the events like this:
Whould be really handy. Is this something that might be in the integration in the near future?
Script is found here: https://github.com/ir0nh3at/Scripts/blob/master/Sophos%20Stuff/Sophos.psm1
Thanks.