Core_Pua_Clean_Sophos Central_General

Alert

Core Pua Clean (Event::Endpoint::CorePuaClean)

SK4 unified event:
Connector/Service

Sophos Central/General

SK4 Version:

2.3.105

Created Date:

Tue Feb 12 2019 10:44:36 GMT+0000 (Coordinated Universal Time)

Last Update:

Tue Jun 18 2019 11:12:04 GMT+0000 (Coordinated Universal Time)

Category

Security Alert

Description

A potentially unwanted application has been cleaned.

Search query

cef_vendor="skyformation" cef_name="security-threat-detected" destinationServiceName="Sophos Central" cn2=1 dpriv="PUA_PUP"

Parsed CEF
Unparsed raw data

Expand to see an example...

Audit sources