This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to track the user account logged in when the infection happened?

Hi Guys,

Can any of you help me in trying to figure out the user account who was logged into the local machine when the infection happened via the Sophos Management Console?  I tried running a report but I was only able to see the Computer name.

Thanks!

:17991


This thread was automatically locked due to age.
Parents
  • Agreed - there's a subtle distinction between infection and infected in the meaning of broken out disease. Indeed Sophos calls their tool Sophos Source of Infection Tool. Still I'm reluctant to completely withdraw my statement - having dealt with, err, successful infections with yet unknown malware. Maybe someone can come up with distinctive terms :smileyhappy:

    Anyway - did you find the information you were looking for?

    Christian

    :18049
Reply
  • Agreed - there's a subtle distinction between infection and infected in the meaning of broken out disease. Indeed Sophos calls their tool Sophos Source of Infection Tool. Still I'm reluctant to completely withdraw my statement - having dealt with, err, successful infections with yet unknown malware. Maybe someone can come up with distinctive terms :smileyhappy:

    Anyway - did you find the information you were looking for?

    Christian

    :18049
Children
No Data