1. Sophos Central Intercept X Advanced With Edr And Mtr
2. Sophos Central Intercept X Advanced Datasheet
3. Sophos Intercept X Reviews

Components Updated

Other release notes

You should also read the Sophos Server Core Agent release notes. They cover the changes, resolved issues and known issues for the core components.

Intercept X system resource usage Hard disk space varies based on what Cryptoguard is doing with regards to file cache for potential rollback. This fluctuates as we copy then release files that are being interacted with by processes prior to conviction/exoneration. Intercept X Advanced with EDR Endpoint Detection and Response built for threat hunting and IT operations Sophos Intercept X Advanced with EDR consolidates powerful endpoint detection and response (EDR) with unmatched endpoint protection. Hunt threats to detect active adversaries, or leverage for IT operations to maintain IT security hygiene.

For information about the changes to the SophosServer Core Agent, see the Sophos Server Core Agent release notes.

For information about the changes to Sophos Central Server Anti-Virus, see the Sophos Central Server Anti-Virus release notes.

For improvements and new features in Sophos Central, see What's new in Sophos Central.

Updates that require a restart

Occasionally an update requires a restart. Sophos never forces this restart and there is no impact on protection or threat detection updates during the period before the restart.

We recommend that you schedule a restart during your next maintenance window to ensure that you are running the latest version.

Sophos Central Intercept X Advanced With Edr And Mtr

Sophos Endpoint Detection and Response (EDR) lets you investigate detected threats (“threat cases”) and search for new threats. It also lets you monitor devices and fix issues remotely.

You can find most EDR features in Overview > Threat Analysis Center.

These features are available if you have an Intercept X license that includes Sophos EDR.

Threat cases

Threat cases let you investigate and clean up malware attacks.

You can find out where an attack started, how it spread, and which processes or files it has affected.

For help, see Threat cases.

Threat searches

Threat searches let you search for potential threats, such as new threats you’ve read about, or for more instances of threats you’ve already seen. You can search using file names, file hashes, IP addresses or domains, and more.

For help, see Threat searches.

Sophos Central Intercept X Advanced Datasheet

Threat indicators

Threat indicators highlight suspicious files that we haven’t blocked but that you might want to investigate.

You can see the probability that files are malicious, along with details of where and when they’ve been run. You can also block and clean up files.

Sophos Intercept X Reviews

For help, see Threat indicators.

Live Discover

Live Discover lets you check activity on devices. You can run queries about the software installed, processes running, registry changes, and more. This helps you detect security weaknesses or malicious activity.

For help with creating and running queries, see Live Discover.

Live Response

Live Response lets you connect directly to an individual device to investigate and fix possible security issues.

For help, see Set up and start Live Response.