sophos-central

What problem does it solve?

This Skill provides comprehensive programmatic control over Sophos Central, streamlining endpoint security management, threat response, and policy configuration.

Core Features & Use Cases

• Endpoint Management: Inventory, isolate, and scan endpoints.
• Alert & Threat Response: Monitor security alerts, acknowledge, and clear them.
• Policy & Settings Management: Configure threat protection, web control, and allowed/blocked items.
• Forensic Analysis: Run XDR queries for deep threat hunting.
• Use Case: Automatically isolate a suspicious endpoint, trigger a scan, and then run an XDR query to investigate the process activity on that machine.

Quick Start

Use the sophos-central skill to list all high severity alerts.