Sophos XDRIntercept X Advanced with XDR, Intercept X Advanced forServer with XDRIntercept X is the industry’s only XDR solution that synchronizes native endpoint,server, firewall, email, cloud and O365 security. Get a holistic view of yourorganization’s environment with the richest data set and deep analysis for threat
detection, investigation and response for both dedicated SOC teams and IT admins.

Answer IT operations and threat hunting questions

Highlights

Quickly get answers to business-critical questions. Both IT admins and cybersecurity
professionals will see real value added when they are performing day-to-day IT operations
and threat hunting tasks.

Ì Answer business critical IT
operations and threat hunting
questionsStart with the best protection

Ì Leverage a prioritized list ofdetections and AI-guided
investigations

Intercept X stops breaches before they can start. Which means you get better protection
and spend less time investigating incidents that should have been automatically stopped.
You also have access to detailed threat intelligence giving you the necessary information
to take rapid, informed actions.

Know where to focus
Hone in on the important issues with a prioritized list of suspicious detections andvulnerable configurations that includes key information for further investigation. Choose
from a library of pre-written templates to ask a wide variety of IT ops and threat hunting
questions or create your own.

Minimize investigation and response time
AI-guided investigations enable you to quickly understand the scope and cause of anincident and minimize time to respond. Access devices for real-time state and up to 90
days of historic data or 30 days historic data in the data lake.

Cross-product visibilityGet maximum visibility of your organization with native integration of Intercept X,Intercept X for Server, Sophos Firewall, Sophos Email, Sophos Mobile, Cloud Optix andMicrosoft Office 365 data.

Multi-platform, multi-OS support
Inspect your environment whether in the cloud, on-premises or virtual across Windows,
macOS, Linux, Amazon Web Services, Microsoft Azure, Google Cloud Platform, and Oracle
Cloud Infrastructure deployments.

Ì Remotely take remedialactions on devices of interest
Ì Get a holistic view of yourorganizations’ IT environmentand drill into granular detailwhen neededÌ Native endpoint, server,
firewall, email, cloud, mobile
and O365 integrations
Ì Access a library of pre-written,
customizable template usecases

Sophos XDR

Use cases
IT Operations

Threat huntingÌ Why is a machine running slowly?
Ì Which devices have known
vulnerabilities, unknown services orunauthorized browser extensions?

Ì What processes are trying to make a network
connection on non-standard ports?
Ì Show processes that have recently
modified files or registry keys

Ì Are there programs runningthat should be removed?

Ì List detected IoCs mapped to theMITRE ATT&CK framework

Ì Identify unmanaged, guest and IoT devices

Ì Extend investigations to 30 days without
bringing a device back online

Ì Why is the office network connection
slow? Which application is causing it?
Ì Look back 30 days for unusual activity
on a missing or destroyed device
Ì Locate mobile devices that are unpatchedor have out of date softwareÌ Use ATP and IPS detections from thefirewall to investigate suspect hostsÌ Compare email header information,
SHAs and other IoCs to identify
traffic to a malicious domainÌ Identify users with multiple failedauthentication attempts

What’s included?

Extended Detection and Response (XDR)
Cross-product data sources
Cross-product detection, investigation & response
Prioritized detections list & AI-guided investigations
Sophos Data Lake
Data lake retention period

30 days

Real-time state information
On-disk data retention period

Up to 90 days

Threat hunting & IT ops template library
Intercept X protection capabilities
For further details on licensing please see the Intercept X and Intercept X for Server license guides.

Try it now for freeRegister for a free 30-day evaluation atsophos.com/intercept-x

United Kingdom and Worldwide Sales
Tel: +44 (0)8447 671131
Email: sales@sophos.com

North American Sales
Toll Free: 1-866-866-2802
Email: nasales@sophos.com© Copyright 2022. Sophos Ltd. All rights reserved.
Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UKSophos is the registered trademark of Sophos Ltd. All other product and company names mentioned aretrademarks or registered trademarks of their respective owners.
22-01-06 DS-NA (MP)Australia and New Zealand Sales
Tel: +61 2 9409 9100
Email: sales@sophos.com.au

Asia Sales
Tel: +65 62244168
Email: salesasia@sophos.com