Sophos Central Cloud alert

This rule is part of a beta feature. To learn more, contact Support.
sophos-central-cloud

Classification:

attack

Tactic:

TA0002-execution

Technique:

T1059-command-and-scripting-interpreter

Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Goal

Monitor and respond to alerts generated by Sophos Central Cloud to maintain security posture.

Strategy

Trigger notifications for any alerts issued by Sophos Central Cloud.

Triage and response

  1. Assess the alert details, focusing on the severity level {{@log_message.severity}}.
  2. Follow the recommended course of action as described in {{@log_message.description}}.
  3. Adhere to organizational protocols to effectively address and mitigate the alert.