Content updates and product architecture: Sophos Endpoint
Tags
attack-pattern: Data Model Models Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Powershell - T1086 Scripting - T1064 Third-Party Software - T1072 Scripting
Show in Graph
Common Information
Type Value
UUID 42c29635-37b5-4fa5-98eb-08ff9c2c6eaa
Fingerprint 955bc3500eafa446
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 15, 2024, 4:37 p.m.
Added to db Aug. 31, 2024, 7:44 a.m.
Last updated Sept. 12, 2024, 7:56 p.m.
Headline Content updates and product architecture: Sophos Endpoint
Title Content updates and product architecture: Sophos Endpoint
Detected Hints/Tags/Attributes 57/1/15
Source URLs
Redirection Url
Details Source https://news.sophos.com/en-us/2024/08/15/content-updates-and-product-architecture-sophos-endpoint/
URL Provider
Details Provider Source level domain
Details sophos.com news.sophos.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 182 ✔ Sophos News https://news.sophos.com/en-us/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
t1.sophosupd.com
Details File 3 
sophosfilescanner.exe
Details File 3 
sspservice.exe
Details File 2 
sophososquery.exe
Details File 3 
mcsclient.exe
Details File 3 
mcsagent.exe
Details File 1 
sophosips.exe
Details File 2 
sntp.sys
Details File 2 
sophosntpservice.exe
Details File 1 
su-repair.exe
Details File 2 
sedservice.exe
Details File 1 
hmpalertsvc.exe
Details File 4 
hmpalert.sys
Details File 2 
hmpalert.dll
Details Windows Registry Key 1 
HKLM\SOFTWARE\Sophos\Management\Policy