From 0a07c79be37c7041147825172a5f0f4f0ae728f1 Mon Sep 17 00:00:00 2001
From: Luct0r <43627224+Luct0r@users.noreply.github.com>
Date: Thu, 27 May 2021 18:17:53 -0700
Subject: [PATCH] Add "Sophos" string for EDR detection

---
 core/esa.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/esa.py b/core/esa.py
index 2ad6bd2..bbd206c 100644
--- a/core/esa.py
+++ b/core/esa.py
@@ -19,7 +19,7 @@
     "F-Secure": ["fsdevcon", "FSORSPClient"],
     "MacAfee": ["enterceptagent", "McAfeeEngineService", "McAfeeFramework", "McCSPServiceHost", "MfeAVSvc"],
     "SentinelOne": ["SentinelAgent", "SentinelOne"],
-    "Sophos": ["sophosssp", "sophossps"],
+    "Sophos": ["sophosssp", "sophossps", "Sophos"],
     "TrendMicro": ["tmntsrv"],
     "Windows Defender": ["MsMpEng"],
     "ZoneALarm": ["zlclient"],