Sophos Central Cloud alert

This rule is part of a beta feature. To learn more, contact Support.
sophos-central-cloud

Classification:

attack

Tactic:

TA0002-execution

Technique:

T1059-command-and-scripting-interpreter

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Goal

Monitor and respond to alerts generated by Sophos Central Cloud to maintain security posture.

Strategy

Trigger notifications for any alerts issued by Sophos Central Cloud.

Triage and response

  1. Assess the alert details, focusing on the severity level {{@log_message.severity}}.
  2. Follow the recommended course of action as described in {{@log_message.description}}.
  3. Adhere to organizational protocols to effectively address and mitigate the alert.