Sophos Central

Version: 1.1
Updated: Jul 11, 2023

Utilize Sophos Central enrichment data during incident investigations.

Actions

• Get Alerts (Enrichment) - Gather Sophos Central alerts.
• Get Endpoints (Enrichment) - Gather all endpoints.
• Get Features (Enrichment) - Gather all features.
• Get Hashes (Enrichment) - Gather a list of all observed hashes.
• Get Licenses (Enrichment) - Gather a list of all licenses.
• Get Locations (Enrichment) - Gather a list of all locations.
• Get Events (Enrichment) - Gather Sophos Central events.

Change Log

• March 6, 2020 - First upload
• July 11, 2023 (v1.1) - Updated the integration with Environmental Variables