{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-guides/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["partial"]},"type":"markdown"},"seo":{"title":"Sophos","siteUrl":"https://docs.synqly.com","lang":"en-US"},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Availability","attributes":{"type":"pre-release"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This feature is actively being developed. Breaking changes should be expected. Synqly Labs is"," ","available only in Synqly Mesh."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Please contact us before using this feature."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"sophos","__idx":0},"children":["Sophos"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Labs URL: ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["synqly://labs/sophos"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"create-a-labs-integration","__idx":1},"children":["Create a Labs integration"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Create an integration for the provider, the same way you would for the real provider."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Set the provider's URL to the Labs URL at the top of this page."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Fill in the credential fields. Labs accepts any value, but the credential must be the type"," ","the provider asks for, such as an OAuth client ID and secret or an API token."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Then call any operation the provider supports. Your requests run through the same connector that"," ","serves a real provider tenant, so the responses have the provider's shape and your code works against"," ","the real provider without changes."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"edr","__idx":2},"children":["EDR"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Provider: Sophos Endpoint"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Operation"},"children":["Operation"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"On Labs"},"children":["On Labs"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["get_endpoint"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Available"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["network_quarantine"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Available"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["query_alerts"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Available"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["query_applications"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Available"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["query_edr_events"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Available"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["query_endpoints"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Available"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["query_exclusions"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Available"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["query_policies"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Available"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["query_posture_score"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Available"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["query_threatevents"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Not available. Threat events are not available on Labs yet."]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"query_alerts","__idx":3},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["query_alerts"]}]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Filter"},"children":["Filter"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Operators"},"children":["Operators"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Not on Labs"},"children":["Not on Labs"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["finding_info.created_time"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["lt, lte, gt, gte"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["finding_info.created_time_dt"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["lt, lte, gt, gte"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["finding_info.types"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq, in"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["finding_info.uid"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq, in"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["metadata.product.name"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq, in"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["metadata.uid"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq, in"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["severity"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["time"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["lt, lte, gt, gte"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"query_applications","__idx":4},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["query_applications"]}]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Filter"},"children":["Filter"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Operators"},"children":["Operators"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Not on Labs"},"children":["Not on Labs"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["product.name"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq, in"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["product.path"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq, in"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]}]}]}]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Sort"},"children":["Sort"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Directions"},"children":["Directions"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Not on Labs"},"children":["Not on Labs"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["product.name"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["asc, desc"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"query_edr_events","__idx":5},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["query_edr_events"]}]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Filter"},"children":["Filter"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Operators"},"children":["Operators"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Not on Labs"},"children":["Not on Labs"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["actor.process.cmd_line"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq, in"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["actor.process.file.name"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq, in"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["actor.process.file.path"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq, in"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["actor.process.name"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq, in"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["device.hostname"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq, in"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["device.ip"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq, in"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["device.os.name"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq, in"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["metadata.product.feature.name"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq, in"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"query_endpoints","__idx":6},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["query_endpoints"]}]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Filter"},"children":["Filter"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Operators"},"children":["Operators"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Not on Labs"},"children":["Not on Labs"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["status_detail"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["time"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq, gt, gte, lt, lte"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]}]}]}]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Sort"},"children":["Sort"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Directions"},"children":["Directions"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Not on Labs"},"children":["Not on Labs"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["status"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["asc, desc"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"query_exclusions","__idx":7},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["query_exclusions"]}]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Filter"},"children":["Filter"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Operators"},"children":["Operators"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Not on Labs"},"children":["Not on Labs"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["resource.type"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq, in"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"query_policies","__idx":8},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["query_policies"]}]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Filter"},"children":["Filter"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Operators"},"children":["Operators"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Not on Labs"},"children":["Not on Labs"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["resource.type"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["eq"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[]}]}]}]}]}]},"headings":[{"value":"Sophos","id":"sophos","depth":1},{"value":"Create a Labs integration","id":"create-a-labs-integration","depth":2},{"value":"EDR","id":"edr","depth":2},{"value":"query_alerts","id":"query_alerts","depth":3},{"value":"query_applications","id":"query_applications","depth":3},{"value":"query_edr_events","id":"query_edr_events","depth":3},{"value":"query_endpoints","id":"query_endpoints","depth":3},{"value":"query_exclusions","id":"query_exclusions","depth":3},{"value":"query_policies","id":"query_policies","depth":3}],"frontmatter":{"slug":"/labs/sophos","seo":{"title":"Sophos"}},"lastModified":"2026-11-13T16:55:41.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/labs/sophos","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}