Hi All, I am looking at the "Threat Protection" baseline policy within Sophos Central and the options available for scheduled scanning. The setting only allows me to set a date and time of when the scanning should start with the option of deep scanning…

I can find very little information on SEC to distinguish if an alert has been triggered by an on-access scan or by a scheduled scan. I know that Sophos has this knowledge as I can find this information on the email alerts that are sent by SEC.i.e scan…