It would be nice to have an integration between IBM Soar and Sophos Central to collect all the events, alerts and XDR logs. A SOC team would have a better overview to check the security level of the infrastructure.