Data Collection and Investigation API

We’ve introduced a new endpoint and server policy in Sophos Central called 'Data Collection and Investigation'. This policy includes settings for enabling Data Lake Uploads and Live Response, crucial tools for threat investigation and response.

Previously, administrators configured Data Lake Uploads and Live Response via the General Settings section in Sophos Central. These settings have been moved into a dedicated policy, offering greater flexibility and several benefits, including easier assignment of policy settings during installation and more granular control across devices. Additionally, the policy can be edited via the Sophos Central API.