https://cybertoolchain.io/tools/sophos-ndr New releases and features in Sophos NDR, tracked by The Cyber Toolchain. en Thu, 14 May 2026 00:00:00 GMT https://docs.sophos.com/releasenotes/output/en-us/nsg/sc_ndr_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/sc_ndr_rn.html Thu, 14 May 2026 00:00:00 GMT Sophos NDR 2.1.0 adds pcap traffic injection, unsupervised anomaly detection in DDE, and Oracle Linux 9 for AWS • Adds a new `pcap replay` feature in Sophos Central to inject malicious and benign traffic for testing detections • Introduces integrated unsupervised anomaly detection in the Data Detection Engine (DDE) as a beta feature Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-ndr https://docs.sophos.com/releasenotes/output/en-us/nsg/sc_ndr_rn.html https://docs.sophos.com/releasenotes/output/en-us/nsg/sc_ndr_rn.html Fri, 20 Feb 2026 00:00:00 GMT Sophos NDR 2.0 moves to Oracle Linux 9 and adds beta Investigation Console pages in Sophos Central. • Upgrades underlying OS from Ubuntu 20.04 to Oracle Linux 9 for both existing and new appliances • Adds beta access to Overview, Reports, and Query pages for the Investigation Console within Sophos Central • Provides a new ISO installer for certified hardware with an updated UI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sophos-ndr