Sophos should offer tests where we can emulate new attacks happening now. For example, people use traveling companies, so we could simulate a new test based on that. Sophos could update tests because we have tests for old attacks. We need new emails with new attacks, something that's happening now. Phish Threat has a lot of features that need to be improved, such as reporting. This is not just with EDR but with Sophos Central as well. For example, if we wanted to find the top ten machines that had been attacked the most last month, we could identify what the problem could be, whether it's the user or something happening with the machine. The report could say, "Last month, 20 machines were affected," maybe thanks to a virus or malware.
