This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Using Sophos Enterprise to monitor End point user account

Hi All,

I was asked about the possibility of Sophos to manage/monitor the End point local account creation.

For example, a staff creates a local user on PC1 and sophos is able to track that such an action was done OR to prompt that this user account creation request has been blocked or disallowed.

Sophos will create a local account called SophosSAUComputerName during installation on end point but would sophos also be aware of other local accounts being created?

Is it even possible?

I've tried to google similar when i was asked about this but i don't think this is part of Sophos functionality?

Could anyone verify?

Appreciate it!

:56023


This thread was automatically locked due to age.
Parents
  • Hi Christian,


    Thanks for your update again.

    Yes, the HIPS and behavior monitoring are enabled for both workstations and servers.

    I do agree that my network guy may not have done any penetration tests to test if the network is secured enough.

    I would subtly inform him.

    Thanks again!!

    :56102
Reply
  • Hi Christian,


    Thanks for your update again.

    Yes, the HIPS and behavior monitoring are enabled for both workstations and servers.

    I do agree that my network guy may not have done any penetration tests to test if the network is secured enough.

    I would subtly inform him.

    Thanks again!!

    :56102
Children
No Data