Sophos

Sophos Data

AntivirusCompound
7 paths from 1 artifacts
Version 1.1
Drew Ervin, Reece394

Paths on disk

7 paths from 2 targets

Includes 1 targets

Each one is collected with this target

ApplicationEvents4 paths

References

1 link

support.sophos.com/support/s/article/KB-000033591?language=en_US(opens in new tab)

Collect it

KAPE command line for Sophos

Source

Destination

--vss--vhdx

kape.exe --tsource C: --tdest D:\Evidence --target Sophos

Note: This is a compound target that references 1 other target. The KAPE command resolves them natively; the PowerShell/Batch/WSL scripts flatten every referenced path into explicit copy commands.

Run with administrator privileges. KAPE Documentation

Part of these collections

3 collections collect this target

SANS_Triage
Antivirus
KapeTriage