Sophos Intercept X - Metadata

Question

Which metadata is exchanged between the client and the cloud? 
 How does Sophos Intercept X process the metadata? Can I see this in the cloud? 
 Where can I find information on this?

RichardP · Answer

You need to clarify what you mean by metadata. 
 In general, the endpoint uploads its status, and any alerts or detections it has found. 
 If you have XDR and have Data Lake Hydration turned on - more data is sent up. You can see what data by looking at the tables and queries available in the Data Lake.