{"id":15179,"date":"2020-03-03T11:16:47","date_gmt":"2020-03-03T16:16:47","guid":{"rendered":"https:\/\/www.firewalls.com\/blog\/?p=15179"},"modified":"2021-08-09T23:32:28","modified_gmt":"2021-08-10T04:32:28","slug":"sophos-threat-cases","status":"publish","type":"post","link":"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/","title":{"rendered":"Sophos Threat Cases make malware cleanup easy"},"content":{"rendered":"<h3><strong>What are Sophos Threat Cases?<\/strong><\/h3>\n<p>Sophos Threat Cases make <a href=\"https:\/\/www.firewalls.com\/brands\/sophos\/central\/intercept-x-advanced-with-edr.html\" target=\"_blank\" rel=\"noopener noreferrer\">Intercept X Advanced with EDR<\/a> truly stand out from the crowd as an <a href=\"https:\/\/www.firewalls.com\/category\/end-user-protection.html\" target=\"_blank\" rel=\"noopener noreferrer\">end user protection platform<\/a>. Granting admins the ability to investigate and clear up malware attacks with just a few clicks, Threat Cases provide a birds\u2019 eye view allowing you to visualize incidents occurring on your network. After getting an idea of what the incident looks like, you can then drill down into individual events and files to investigate details at a granular level. Guided response, root cause analysis, and attack visualization make Threat Cases a one-of-a-kind experience for network administrators.<\/p>\n<p>See where attacks originated, how and where they spread, and identify which files, processes, applications, and devices were affected by the breach. Threat Cases are <a href=\"https:\/\/www.firewalls.com\/brands\/sophos\/central\/intercept-x-advanced-with-edr.html\" target=\"_blank\" rel=\"noopener noreferrer\">available for both XG firewalls<\/a> and <a href=\"https:\/\/www.firewalls.com\/brands\/sophos\/central\/intercept-x-advanced-for-servers-with-edr.html\" target=\"_blank\" rel=\"noopener noreferrer\">for servers<\/a>, offering extensive visibility and control both on-premise and in the cloud.<\/p>\n<p style=\"padding-left: 40px;\"><strong>Quickly identify, diagnose, &amp; mediate<\/strong><\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>Isolate affected devices<\/li>\n<li>Search for similar threats<\/li>\n<li>Clean up after a breach<\/li>\n<li>Block threats with automated guided response<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>For example, if malicious behavior is detected in an Office 365 file such as a Word document or Excel spreadsheet, Sophos Threat Cases will indicate that the file was written to the computer by Outlook.exe and tip off administrators that the threat was the result of a malicious email. Admins may then use this information to identify and close security gaps to prevent future exploitation of this attack vector.<\/p>\n<p>Threat cases are only generated for malicious behavior detections and do not include detection of Potential Unwanted Applications and other false positives.<\/p>\n<p style=\"padding-left: 40px;\"><strong>Types of infections seen by Sophos Threat Cases:<\/strong><\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>Malware detection<\/li>\n<li>Web threats<\/li>\n<li>Malicious behavior<\/li>\n<li>Malicious traffic<\/li>\n<li>Exploits<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h3><strong>Where to find Sophos Threat Cases<\/strong><\/h3>\n<p>If you want to take advantage of the features offered by Sophos Threat Cases such as root cause analysis, registry key and process filters, infection path visualization, and guided response, you\u2019ll need an <a href=\"https:\/\/www.firewalls.com\/brands\/sophos\/central\/intercept-x-advanced.html\" target=\"_blank\" rel=\"noopener noreferrer\">Intercept X Advanced license<\/a> to get started. Once logged into your <a href=\"https:\/\/www.firewalls.com\/brands\/sophos\/central.html\" target=\"_blank\" rel=\"noopener noreferrer\">Sophos Central<\/a> Admin dashboard, Sophos Threat Cases can be found by clicking the \u201cEndpoint Protection\u201d or \u201cServer Protection\u201d menu linked in the \u201cMy Products\u201d section.<\/p>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"aligncenter wp-image-15180\" src=\"https:\/\/www.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/alert4-1024x236.jpg\" alt=\"Sophos Threat Cases is found in the Sophos Central admin dashboard\" width=\"942\" height=\"217\" srcset=\"https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/alert4-1024x236.jpg 1024w, https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/alert4-300x69.jpg 300w, https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/alert4-768x177.jpg 768w, https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/alert4.jpg 1440w\" sizes=\"(max-width: 942px) 100vw, 942px\" \/><\/p>\n<h3><strong>The Anatomy of a Threat Case<\/strong><\/h3>\n<p>What does a threat case event look like and why is it so helpful for network administrators? Every Threat Case begins with a simplified events chain, giving an easy-to-follow visualization of the basic details of your incident.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-15181 lazyload\" data-src=\"https:\/\/www.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/14.png\" alt=\"Simplified Attack Chain makes it easy to visualize a breach\" width=\"632\" height=\"185\" data-srcset=\"https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/14.png 786w, https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/14-300x88.png 300w, https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/14-768x225.png 768w\" data-sizes=\"(max-width: 632px) 100vw, 632px\" src=\"data:image\/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==\" style=\"--smush-placeholder-width: 632px; --smush-placeholder-aspect-ratio: 632\/185;\" \/><noscript><img decoding=\"async\" class=\"aligncenter wp-image-15181\" src=\"https:\/\/www.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/14.png\" alt=\"Simplified Attack Chain makes it easy to visualize a breach\" width=\"632\" height=\"185\" srcset=\"https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/14.png 786w, https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/14-300x88.png 300w, https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/14-768x225.png 768w\" sizes=\"(max-width: 632px) 100vw, 632px\" \/><\/noscript><\/p>\n<p>After the simplified attack chain, each Sophos Threat Case serves up a more robust attack summary that details basic information like detection name, root cause, potentially affected data, infected user, device names, and attack timeframe.<\/p>\n<p>The summary section is followed up by a Suggested Next Steps function which generates automated remediation advice on what to do next. Advice is dependent on the type of attack and other details specific to the incident. Examples of some advice from Sophos Threat Cases include isolating computers, setting priorities, and setting the status of a case record.<\/p>\n<p>Last but definitely not least, the Analyze section is home to most of the detailed information admins will love from Sophos Threat Cases. Here you can find graphics of the attack \u201cbeacons\u201d that Sophos detected and the root cause that Threat Cases identified. The beacon and root cause are then linked by interconnecting lines that make up the attack chain.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-15182 lazyload\" data-src=\"https:\/\/www.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/Picture1.png\" alt=\"Sophos Threat Cases Analysis Section\" width=\"725\" height=\"567\" src=\"data:image\/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==\" style=\"--smush-placeholder-width: 725px; --smush-placeholder-aspect-ratio: 725\/567;\" \/><noscript><img decoding=\"async\" class=\"aligncenter wp-image-15182\" src=\"https:\/\/www.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/Picture1.png\" alt=\"Sophos Threat Cases Analysis Section\" width=\"725\" height=\"567\" \/><\/noscript><\/p>\n<p>Admins can click on any individual event in this attack chain graphic, allowing them to view additional detailed information in a right-hand pop-up menu.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-15183 lazyload\" data-src=\"https:\/\/www.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/Picture2.png\" alt=\"Sophos Threat Cases detail overviw\" width=\"469\" height=\"158\" data-srcset=\"https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/Picture2.png 897w, https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/Picture2-300x101.png 300w, https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/Picture2-768x259.png 768w\" data-sizes=\"(max-width: 469px) 100vw, 469px\" src=\"data:image\/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==\" style=\"--smush-placeholder-width: 469px; --smush-placeholder-aspect-ratio: 469\/158;\" \/><noscript><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-15183\" src=\"https:\/\/www.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/Picture2.png\" alt=\"Sophos Threat Cases detail overviw\" width=\"469\" height=\"158\" srcset=\"https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/Picture2.png 897w, https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/Picture2-300x101.png 300w, https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/Picture2-768x259.png 768w\" sizes=\"(max-width: 469px) 100vw, 469px\" \/><\/noscript><\/p>\n<h3><strong>Try Sophos Intercept X and Sophos XG Firewall<\/strong><\/h3>\n<p>Ready to get your hands on Threat Cases but still not sure about <a href=\"https:\/\/www.firewalls.com\/brands\/sophos.html\" target=\"_blank\" rel=\"noopener noreferrer\">Sophos security<\/a>? <a href=\"https:\/\/secure2.sophos.com\/en-us\/products\/endpoint-antivirus\/free-trial.aspx?id=00130000019KGZ4\" target=\"_blank\" rel=\"noopener noreferrer\">Try a 30-day trial of Intercept X<\/a> or a <a href=\"https:\/\/secure2.sophos.com\/en-us\/content\/offers\/xg-firewall\/free-trial.aspx?id=00130000019KGZ4\" target=\"_blank\" rel=\"noopener noreferrer\">30-day trial of Sophos XG Firewall<\/a> for free before you buy. You can also get your next <a href=\"https:\/\/www.firewalls.com\/brands\/sophos\/firewalls\/xg.html\" target=\"_blank\" rel=\"noopener noreferrer\">Sophos XG Firewall appliance<\/a> at no cost when you purchase a qualifying 3-year security license with our <a href=\"https:\/\/www.firewalls.com\/brands\/sophos\/firewalls.html\" target=\"_blank\" rel=\"noopener noreferrer\">Sophos Evolved Firewall Promo<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>What are Sophos Threat Cases? Sophos Threat Cases make Intercept X Advanced with EDR truly stand out from the crowd as an end user protection platform. Granting admins the ability to investigate and clear up malware attacks with just a few clicks, Threat Cases provide a birds\u2019 eye view allowing you to visualize incidents occurring [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":15185,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[285,68],"tags":[410,53],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v19.14 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Sophos Threat Cases make malware cleanup easy - Firewalls.com<\/title>\n<meta name=\"description\" content=\"Sophos Threat Cases make it easy to visualize attack chains, find root cause, &amp; clean up with guided response. Try Intercept X with EDR free for 30 days.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Sophos Threat Cases make malware cleanup easy - Firewalls.com\" \/>\n<meta property=\"og:description\" content=\"Sophos Threat Cases make it easy to visualize attack chains, find root cause, &amp; clean up with guided response. Try Intercept X with EDR free for 30 days.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/\" \/>\n<meta property=\"og:site_name\" content=\"Firewalls.com\" \/>\n<meta property=\"article:publisher\" content=\"http:\/\/www.facebook.com\/firewallscom\" \/>\n<meta property=\"article:published_time\" content=\"2020-03-03T16:16:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-08-10T04:32:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/shutterstock_1192132651-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1707\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Andrew Harmon\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@firewallscom\" \/>\n<meta name=\"twitter:site\" content=\"@firewallscom\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Andrew Harmon\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/\"},\"author\":{\"name\":\"Andrew Harmon\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/person\/8e89a2f96065af1717d00dfd06dca962\"},\"headline\":\"Sophos Threat Cases make malware cleanup easy\",\"datePublished\":\"2020-03-03T16:16:47+00:00\",\"dateModified\":\"2021-08-10T04:32:28+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/\"},\"wordCount\":650,\"publisher\":{\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#organization\"},\"keywords\":[\"cyber threats\",\"Sophos\"],\"articleSection\":[\"Product Spotlights\",\"Weekly\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/\",\"url\":\"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/\",\"name\":\"Sophos Threat Cases make malware cleanup easy - Firewalls.com\",\"isPartOf\":{\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#website\"},\"datePublished\":\"2020-03-03T16:16:47+00:00\",\"dateModified\":\"2021-08-10T04:32:28+00:00\",\"description\":\"Sophos Threat Cases make it easy to visualize attack chains, find root cause, & clean up with guided response. Try Intercept X with EDR free for 30 days.\",\"breadcrumb\":{\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/dev01.firewalls.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Sophos Threat Cases make malware cleanup easy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#website\",\"url\":\"https:\/\/dev01.firewalls.com\/blog\/\",\"name\":\"Firewalls.com\",\"description\":\"Your Home For Cyber Security News, Stories, &amp; Tutorials\",\"publisher\":{\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/dev01.firewalls.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#organization\",\"name\":\"Firewalls.com\",\"url\":\"https:\/\/dev01.firewalls.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.firewalls.com\/blog\/wp-content\/uploads\/2017\/08\/BrandedLogo-TagLineBelow.png\",\"contentUrl\":\"https:\/\/www.firewalls.com\/blog\/wp-content\/uploads\/2017\/08\/BrandedLogo-TagLineBelow.png\",\"width\":365,\"height\":85,\"caption\":\"Firewalls.com\"},\"image\":{\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/company-beta\/1439857\/\",\"https:\/\/www.youtube.com\/user\/firewallsDotCom\",\"http:\/\/www.facebook.com\/firewallscom\",\"https:\/\/twitter.com\/firewallscom\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/person\/8e89a2f96065af1717d00dfd06dca962\",\"name\":\"Andrew Harmon\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e5d2f09d4c27c62001c903fc1216429e?s=96&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e5d2f09d4c27c62001c903fc1216429e?s=96&r=g\",\"caption\":\"Andrew Harmon\"},\"description\":\"Andrew Harmon is the Director of Marketing for Firewalls.com, co-host of the Ping podcast, and engineer-to-English translator of the network security lexicon. Andrew focuses on creating content for small business owners and cybersecurity novices to make this crucial facet of modern business more approachable for non-experts everywhere.\",\"sameAs\":[\"https:\/\/www.Firewalls.com\",\"aharmon@firewalls.com\"],\"url\":\"https:\/\/dev01.firewalls.com\/blog\/author\/aharmon\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Sophos Threat Cases make malware cleanup easy - Firewalls.com","description":"Sophos Threat Cases make it easy to visualize attack chains, find root cause, & clean up with guided response. Try Intercept X with EDR free for 30 days.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/","og_locale":"en_US","og_type":"article","og_title":"Sophos Threat Cases make malware cleanup easy - Firewalls.com","og_description":"Sophos Threat Cases make it easy to visualize attack chains, find root cause, & clean up with guided response. Try Intercept X with EDR free for 30 days.","og_url":"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/","og_site_name":"Firewalls.com","article_publisher":"http:\/\/www.facebook.com\/firewallscom","article_published_time":"2020-03-03T16:16:47+00:00","article_modified_time":"2021-08-10T04:32:28+00:00","og_image":[{"width":2560,"height":1707,"url":"https:\/\/dev01.firewalls.com\/blog\/wp-content\/uploads\/2020\/03\/shutterstock_1192132651-scaled.jpg","type":"image\/jpeg"}],"author":"Andrew Harmon","twitter_card":"summary_large_image","twitter_creator":"@firewallscom","twitter_site":"@firewallscom","twitter_misc":{"Written by":"Andrew Harmon","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/#article","isPartOf":{"@id":"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/"},"author":{"name":"Andrew Harmon","@id":"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/person\/8e89a2f96065af1717d00dfd06dca962"},"headline":"Sophos Threat Cases make malware cleanup easy","datePublished":"2020-03-03T16:16:47+00:00","dateModified":"2021-08-10T04:32:28+00:00","mainEntityOfPage":{"@id":"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/"},"wordCount":650,"publisher":{"@id":"https:\/\/dev01.firewalls.com\/blog\/#organization"},"keywords":["cyber threats","Sophos"],"articleSection":["Product Spotlights","Weekly"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/","url":"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/","name":"Sophos Threat Cases make malware cleanup easy - Firewalls.com","isPartOf":{"@id":"https:\/\/dev01.firewalls.com\/blog\/#website"},"datePublished":"2020-03-03T16:16:47+00:00","dateModified":"2021-08-10T04:32:28+00:00","description":"Sophos Threat Cases make it easy to visualize attack chains, find root cause, & clean up with guided response. Try Intercept X with EDR free for 30 days.","breadcrumb":{"@id":"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/dev01.firewalls.com\/blog\/sophos-threat-cases\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/dev01.firewalls.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Sophos Threat Cases make malware cleanup easy"}]},{"@type":"WebSite","@id":"https:\/\/dev01.firewalls.com\/blog\/#website","url":"https:\/\/dev01.firewalls.com\/blog\/","name":"Firewalls.com","description":"Your Home For Cyber Security News, Stories, &amp; Tutorials","publisher":{"@id":"https:\/\/dev01.firewalls.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/dev01.firewalls.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/dev01.firewalls.com\/blog\/#organization","name":"Firewalls.com","url":"https:\/\/dev01.firewalls.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.firewalls.com\/blog\/wp-content\/uploads\/2017\/08\/BrandedLogo-TagLineBelow.png","contentUrl":"https:\/\/www.firewalls.com\/blog\/wp-content\/uploads\/2017\/08\/BrandedLogo-TagLineBelow.png","width":365,"height":85,"caption":"Firewalls.com"},"image":{"@id":"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company-beta\/1439857\/","https:\/\/www.youtube.com\/user\/firewallsDotCom","http:\/\/www.facebook.com\/firewallscom","https:\/\/twitter.com\/firewallscom"]},{"@type":"Person","@id":"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/person\/8e89a2f96065af1717d00dfd06dca962","name":"Andrew Harmon","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/dev01.firewalls.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e5d2f09d4c27c62001c903fc1216429e?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e5d2f09d4c27c62001c903fc1216429e?s=96&r=g","caption":"Andrew Harmon"},"description":"Andrew Harmon is the Director of Marketing for Firewalls.com, co-host of the Ping podcast, and engineer-to-English translator of the network security lexicon. Andrew focuses on creating content for small business owners and cybersecurity novices to make this crucial facet of modern business more approachable for non-experts everywhere.","sameAs":["https:\/\/www.Firewalls.com","aharmon@firewalls.com"],"url":"https:\/\/dev01.firewalls.com\/blog\/author\/aharmon\/"}]}},"_links":{"self":[{"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/posts\/15179"}],"collection":[{"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/comments?post=15179"}],"version-history":[{"count":10,"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/posts\/15179\/revisions"}],"predecessor-version":[{"id":16971,"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/posts\/15179\/revisions\/16971"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/media\/15185"}],"wp:attachment":[{"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/media?parent=15179"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/categories?post=15179"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dev01.firewalls.com\/blog\/wp-json\/wp\/v2\/tags?post=15179"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}