Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 10 subscribers
  • Views 13973 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to submit False Positive samples, and if that is even possible?

seank

A false detection was made, and I want to submit information on how to correct the issue. I cannot locate a file or option to request someone to look into the issue. Am I missing something?

I found the "Activity Record" within "Root Cause Analysis Details". Is that where I can do it?



This thread was automatically locked due to age.
  • 0

    Here you can find how to submit sample files to SophosLabs, you will be asked to enter the reason for submitting the sample (e.g. false positive)

     

    Submitting samples of suspicious files to Sophos

    community.sophos.com/.../11490

  • 0

    HI All,

    To report False positive for Intercept, you may need to open a Service request with our Sophos Labs and would suggest to collect the logs and Samples (Software Download link or actual setup).. 

    Step 1: Collect the logs from your system using SDU (Sophos Diagnostics Utility). 

    Step 2: Submit the file found by the detection path or the software itself if it's a part of an installation 

    Step 3: Zip both of the files and Submit the Sample by following KB article 11490.

    Thanks and Regards

    Aditya Patel | Network and Security engineer

     

    Regards,

    Aditya Patel
    Global Escalation Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

Unfiltered HTML