User Profile Disk conversion
When cookies, viruses or other malicious content is found in a user's UPD, Sophos ID's the volume instead of the User.
Example: When malicious content is found, the device is ID'd as \Device\HarddiskVolume6\ instead of the Username or owner that owns the disk.
The only way to discover which user's UPD is is to use Diskpart "list volume" commands via CMD.
Would be great if Sophos Central would ID this instead of showing the volumes.