Classification:

attack

Tactic:

TA0002-execution

Technique:

T1059-command-and-scripting-interpreter

VIEW RULE IN DATADOG VIEW SIGNALS

Goal

Monitor and respond to alerts generated by Sophos Central Cloud to maintain security posture.

Strategy

Trigger notifications for any alerts issued by Sophos Central Cloud.

Triage and response

1. Assess the alert details, focusing on the severity level {{@log_message.severity}}.
2. Follow the recommended course of action as described in {{@log_message.description}}.
3. Adhere to organizational protocols to effectively address and mitigate the alert.