ilert + Sophos: create alerts in ilert from Sophos Central alerts

Sophos Central is the cloud console that manages Sophos endpoint, server, and firewall protection, and it collects the alerts those products raise, such as malware detections, blocked threats, and tamper attempts. With this integration, those alerts automatically create alerts in ilert: ilagent, ilert’s agent, polls the Sophos Central SIEM API every 60 seconds and forwards each new Sophos alert to your ilert alert source, and ilert routes it to the on-call responder through your escalation policy, via push, SMS, voice call, or chat. Each ilert alert carries the Sophos severity and the full Sophos record, including alert type, endpoint, threat, and file path, so responders see what was detected and where. The integration is one-directional and runs ilagent on an always-on host of your own, via Docker or as a binary.