This demo shows Sophos User Activity Verification being leveraged to notify an administrator of a suspicious detection and triggering an investigation workflow. This is done via the Sophos Central API and Sophos Factory offering.
More details about User Activity Verification are available in this article.
Please share any feedback, or suggestions for other use cases, at 
Formatting changes.
[edited by: tom_w at 12:44 PM (GMT -7) on 22 Jul 2022]