EDR can't use live response because need MFA
Good morning,
in our eviroment we can't use live response on uor EDR beacuase we need to activate the MFA for admin account, but at this moment we use azure federation for login with microsoft account(who already has mfa anabled), but we still have…
Live query pre-res / requirements
Hi,
I've looked for this information in the Admin guide and various other locations but I've drawn a blank.
I'm trying to gather some information on the pre-reqs for a good Sophos Live query, specifically the logs. After all, a query is only as good…
Intercept X with EDR September enhancements
Throughout September we will continue to enhance EDR capabilities and with our latest update we are pleased to announce that the powerful EDR querying and response capabilities of Live Discover and Live Response are now generally available on Mac devices…
Need Docs for Linux EDR
Ive installed Central EDR linux but its file structure and cmd's are different to Central Linux, Is there a pdf around with the updated cmds for linux edr pls?? I cant run manual tasks with EDR installed as the file names and locations have all changed…
Enhancing EDR in The Cloud
We are excited to announce that Intercept X for Server Advanced with EDR has been enhanced with powerful cloud visibility features from Cloud Optix.
In addition to even more detail on AWS, Azure and GCP cloud workloads, this integration gives Sophos…
Detecting Glupteba malware with Sophos EDR
Last week SophosLabs published a report about the Glupteba malware. According to Sophos Labs this malware family has been growing in numbers. "This malware, with its hard-to-pronounce name, has been getting regular updates and feature enhancements that…
EDR Threat Indicators now Generally Available
After enhancing the Threat Indicators features since it was made available to Intercept X Advanced with EDR and Intercept X with EDR for Server customers in July, Sophos has now declared the feature Generally Available.
Threat Indicators solves the…
Intercept X Advanced for Server with EDR - Now available
Intercept X Advanced for Server with EDR is now available. With this update we bring the EDR capabilities from our Endpoint Protection to Windows Servers.
You can add EDR today to report on your security posture any time, detect attacks that went unnoticed…
Intercept X Advanced with EDR 1.1 now available
Intercept X Advanced with EDR 1.1 is now available. With this latest update, EDR enabled devices will now start to capture and allow searching for the execution of good admin tools which can be used for malicious purposes. To begin with we’ll be supporting…
EDR for Server Early Access Program - Known Issues 18 03 2019
Review this document for information on the latest known issues.
Early Access Program Release: Intercept X for Server with EDR
Description:
The new Intercept X for Server with EDR capabilities allow you to take charge of security incidents by answering the tough questions about an event, investigate with deep expertise, and respond with a click of a button.
Eligibility…
Joining EDR for Server Early Access Program 25 02 2019
See this presentation for full instructions on how to join the EDR for Server Early Access Program
Introducing the new Threat Analysis Center
To simplify the experience when reviewing and analysing Threat Cases we are making changes to where Threat Cases are accessed in Sophos Central. A new Threat Analysis Center can be found in the main Overview section of Sophos Central and this new area…
[Sophos Notification] Intercept X with EDR Early Access Program Now Open!
Hi Community,
The best just got better. Sophos is pleased to announce that the Intercept X Advanced with EDR Early Access Program is now open. The new Endpoint Detection and Response (EDR) capabilities allow you to take charge of security incidents…