Get started
Explore managed detection and response with Sophos MDR.
Experiencing a breach? Get immediate help.
Defend your business 24/7 with managed detection and response.
Trusted by more than 600,000 customers worldwide. Read their stories.
Find a Sophos partner near you.
Subscribe to the Sophos blog.
RSS
Security Operations
Threat Research
active adversary
Active Adversary Report
Compromised Credentials
detection
dwell time
featured
impact
incident response
LOLBIN
MFA
Monitoring
RDP
Remote Ransomware
root cause
It takes two: The 2025 Sophos Active Adversary Report
April 2, 2025
IR
LoLBINs
MDR
The Bite from Inside: The Sophos Active Adversary Report
December 12, 2024
Credentials
Privacy
qilin
Ransomware
Qilin ransomware caught stealing credentials stored in Google Chrome
August 22, 2024
AnyDesk
mad liberator
malware
Social engineering
Don’t get Mad, get wise
August 13, 2024
Sophos X-Ops
RD Web Access abuse: Fighting back
June 12, 2024
Products & Services
CIR
NCSC
Sophos IR
Sophos Incident Response achieves NCSC Certified Incident Response (CIR) Level 2 status
May 14, 2024
data extraction
DFIR
Encryption
virtual machine
Extracting data from encrypted virtual disks: six seven methods
May 13, 2024
Case Study
It’s Oh So Quiet (?): The Sophos Active Adversary Report for 1H 2024
April 3, 2024
Incident response tools
Remote Desktop Protocol: The Series
March 20, 2024