Live Response Usage Report
Live Response in Sophos Central is a power tool (essentially SHELL) and need fs to be monitored when people use it. There should be a report that can be scheduled to automatically be sent via email to Admins on a monthly basis that shows whenever Live Response was used and the comment that the Admin entered in the "Purpose" field along with the time stamp etc. The same info that shows up in the Audit Log but specific to Live Response Only and configurable in a report that can be configured to auto distribute on a cadence s/a monthly.
2
votes
Melissa
shared this idea
1 comment
-
Steven
commented
In addition to this, it would be very useful to keep a record of commands that were run by the admins in the shell session.
