How do I submit samples to Sophos?

How do I submit samples to Sophos?

Submit samples directly to Sophos website

  1. Click Submit a Sample followed by Sample File. (To report a website choose Web Address (URL) – Choose either Endpoint protection option for product/service)
  2. Provide the required details and sample files / website url.
  3. Click the Submit button.

How do I report a false positive on Windows Defender?

Go to the Microsoft 365 Defender portal (https://security.microsoft.com) and sign in. In the navigation pane, choose Alerts queue….

  1. Classify the alert as a false positive.
  2. Suppress the alert.
  3. Create an indicator for Microsoft Defender for Endpoint.
  4. Submit a file to Microsoft for analysis.

How do you submit spam and false positive spam samples to SophosLabs?

Google Mail

  1. Select the sample mail in the Gmail web interface.
  2. Right-click and select Forward as Attachment.
  3. In the Recipient (To) area, enter the necessary email address:
  4. Send the newly created email to SophosLabs at the address you selected, with the subject line of your choice.

How to submit a file for malware analysis?

Submit a file for malware analysis. Microsoft security researchers analyze suspicious files to determine if they are threats, unwanted applications, or normal files. Submit files you think are malware or files that you believe have been incorrectly classified as malware. For more information, read the submission guidelines. Submit file as a.

How can I share a malware sample with another researcher?

The most common way of sharing a malware sample with another researcher involves embedding the malicious file in a zip archive that has been protected with the password “infected”.

How to submit malware and non-malware to Microsoft?

We recommend that you use your Microsoft work or school account. After you’ve uploaded the file or files, note the Submission ID that’s created for your sample submission (for example, 7c6c214b-17d4-4703-860b-7f1e9da03f7f ).

Which is the best tool for malware researchers?

One archival format that is relatively popular among malware researchers is 7-Zip. This open source tool, available for most platforms, gives you the option of encrypting file names when password-protecting the archive. The command-line version of the tool calls this “archive header encryption,” which you can accomplish using the -mhe=on parameter.