sophos.sophoshomelogs#

$ target-query <path/to/target> -f sophos.sophoshomelogs
Details#

Module

apps.av.sophos.SophosPlugin

Output

records

Module documentation

No documentation

Function documentation

Return log history records from Sophos Home.

Yields SophosLogRecord with the following fields:

ts (datetime): Timestamp. description (string): Short description of the alert. path (path): Path to the infected file (if available).