Sophos Central Report for which device or user has the most attacks/detections of malware( most infected pc or user) ?

Can someone please help me out with this

I do not think so, I have looked before.  But really what is your goal?  Are you trying to determine which machines are the most vulnerable or which users cause the most issues?  I only ask because I have looked through various reports before, for example web control will show you how many violations a user has, but there is a lot of false positives in there, a user could go to a work related site that has ads or tracking from a site that is blocked to skew the results.  The same could be said for viruses, since one occurrence by the user or on a specific computer could cause multiple infections on the system.

Hi grifter,

Thanks for your reply. It's just a request by the client and I have seen that most of the AVs have such type of report. So I am curious why does Sophos central miss this simple yet commonly used report.

If you are or work with a Sophos Partner you could try to reach out for a feature request?  I understand, customers asking for something, especially if it is common in many other applications.  

Hi Kandarp Desai

If you are looking to find the TOP 5 or 10 machines with the most number of detection, you can filter the logs for 'malware' under the 'Logs & Reports'. Export the logs in CSV format for the desired time period and then you may filter/sort the data as per your requirement.

You can also save the custom report and schedule it to be emailed for future use.

But if you are looking for the pre-configured filter, I would suggest you to vote the existing feature request so that it can be included in the future.