Hi All,
We have rolled out file integrity monitoring. My question is can someone share with me how they are reviewing these events daily? We have a central log monitor, but since Sophos does not write any detail to the event's general message, only in the detail, it is of no use to us. My only option at this time is to manually review each server's event log daily which is not practical. There are no events in Sophos Central other than to indicate monitoring status. So really, at this point, it is only a tool we can use when researching an event that was detected by other means and not something we can use for proactive monitoring. Thanks.
This thread was automatically locked due to age.
