Sophos Central Report for which device or user has the most attacks/detections of malware( most infected pc or user) ?

Can someone please help me out with this

I do not think so, I have looked before.  But really what is your goal?  Are you trying to determine which machines are the most vulnerable or which users cause the most issues?  I only ask because I have looked through various reports before, for example web control will show you how many violations a user has, but there is a lot of false positives in there, a user could go to a work related site that has ads or tracking from a site that is blocked to skew the results.  The same could be said for viruses, since one occurrence by the user or on a specific computer could cause multiple infections on the system.

I do not think so, I have looked before.  But really what is your goal?  Are you trying to determine which machines are the most vulnerable or which users cause the most issues?  I only ask because I have looked through various reports before, for example web control will show you how many violations a user has, but there is a lot of false positives in there, a user could go to a work related site that has ads or tracking from a site that is blocked to skew the results.  The same could be said for viruses, since one occurrence by the user or on a specific computer could cause multiple infections on the system.

Hi grifter,

Thanks for your reply. It's just a request by the client and I have seen that most of the AVs have such type of report. So I am curious why does Sophos central miss this simple yet commonly used report.

If you are or work with a Sophos Partner you could try to reach out for a feature request?  I understand, customers asking for something, especially if it is common in many other applications.