diff --git a/EDR_telem.json b/EDR_telem.json
index 2952fe0..418e60f 100644
--- a/EDR_telem.json
+++ b/EDR_telem.json
@@ -13,6 +13,7 @@
     "MDE":"Yes",
     "Qualys":"Yes",
     "Sentinel One":"Yes",
+    "Sophos":"Yes",
     "Symantec SES Complete":"Yes",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -33,6 +34,7 @@
     "MDE":"Yes",
     "Qualys":"Yes",
     "Sentinel One":"No",
+    "Sophos":"No",
     "Symantec SES Complete":"Yes",
     "Sysmon":"Yes",
     "Trellix":"No",
@@ -53,6 +55,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"Yes",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -73,6 +76,7 @@
     "MDE":"Yes",
     "Qualys":"Yes",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"Yes",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -93,6 +97,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"No",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -113,6 +118,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"Partially",
+    "Sophos":"No",
     "Symantec SES Complete":"Yes",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -133,6 +139,7 @@
     "MDE":"Yes",
     "Qualys":"Yes",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"Yes",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -153,6 +160,7 @@
     "MDE":"No",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"No",
     "Symantec SES Complete":"Yes",
     "Sysmon":"No",
     "Trellix":"Yes",
@@ -173,6 +181,7 @@
     "MDE":"Yes",
     "Qualys":"Yes",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"Yes",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -193,6 +202,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"Yes",
     "Sysmon":"No",
     "Trellix":"Yes",
@@ -213,6 +223,7 @@
     "MDE":"Yes",
     "Qualys":"Yes",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"Yes",
     "Sysmon":"No",
     "Trellix":"Yes",
@@ -233,6 +244,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"Via EventLogs",
     "Symantec SES Complete":"No",
     "Sysmon":"No",
     "Trellix":"Yes",
@@ -253,6 +265,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"Via EventLogs",
     "Symantec SES Complete":"No",
     "Sysmon":"No",
     "Trellix":"Yes",
@@ -273,6 +286,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"Via EventLogs",
     "Symantec SES Complete":"No",
     "Sysmon":"No",
     "Trellix":"Yes",
@@ -293,6 +307,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"Yes",
+    "Sophos":"Via EventLogs",
     "Symantec SES Complete":"Yes",
     "Sysmon":"No",
     "Trellix":"Yes",
@@ -313,6 +328,7 @@
     "MDE":"No",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"Via EventLogs",
     "Symantec SES Complete":"Yes",
     "Sysmon":"No",
     "Trellix":"Yes",
@@ -333,6 +349,7 @@
     "MDE":"Yes",
     "Qualys":"Yes",
     "Sentinel One":"Yes",
+    "Sophos":"Yes",
     "Symantec SES Complete":"Via EnablingTelemetry",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -353,6 +370,7 @@
     "MDE":"Yes",
     "Qualys":"Yes",
     "Sentinel One":"No",
+    "Sophos":"Yes",
     "Symantec SES Complete":"Via EnablingTelemetry",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -373,6 +391,7 @@
     "MDE":"Yes",
     "Qualys":"Yes",
     "Sentinel One":"Via EnablingTelemetry",
+    "Sophos":"Yes",
     "Symantec SES Complete":"Partially",
     "Sysmon":"No",
     "Trellix":"Yes",
@@ -393,6 +412,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"No",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -413,6 +433,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"No",
     "Symantec SES Complete":"No",
     "Sysmon":"No",
     "Trellix":"No",
@@ -433,6 +454,7 @@
     "MDE":"Yes",
     "Qualys":"Yes",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"Yes",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -453,6 +475,7 @@
     "MDE":"Yes",
     "Qualys":"Yes",
     "Sentinel One":"Yes",
+    "Sophos":"Yes",
     "Symantec SES Complete":"Yes",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -473,6 +496,7 @@
     "MDE":"No",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"No",
     "Symantec SES Complete":"No",
     "Sysmon":"Yes",
     "Trellix":"No",
@@ -493,6 +517,7 @@
     "MDE":"Yes",
     "Qualys":"Yes",
     "Sentinel One":"Yes",
+    "Sophos":"Partially",
     "Symantec SES Complete":"Yes",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -513,6 +538,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"Yes",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -533,6 +559,7 @@
     "MDE":"Yes",
     "Qualys":"Yes",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"Yes",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -553,6 +580,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"Yes",
+    "Sophos":"Via EventLogs",
     "Symantec SES Complete":"No",
     "Sysmon":"No",
     "Trellix":"No",
@@ -573,6 +601,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"No",
     "Sysmon":"No",
     "Trellix":"Yes",
@@ -593,6 +622,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"No",
     "Sysmon":"No",
     "Trellix":"No",
@@ -613,6 +643,7 @@
     "MDE":"Via EventLogs",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"Via EventLogs",
     "Symantec SES Complete":"No",
     "Sysmon":"No",
     "Trellix":"No",
@@ -633,6 +664,7 @@
     "MDE":"No",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"No",
     "Symantec SES Complete":"No",
     "Sysmon":"No",
     "Trellix":"Yes",
@@ -653,6 +685,7 @@
     "MDE":"No",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"No",
     "Symantec SES Complete":"No",
     "Sysmon":"No",
     "Trellix":"No",
@@ -673,6 +706,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"No",
     "Sysmon":"Yes",
     "Trellix":"No",
@@ -693,6 +727,7 @@
     "MDE":"No",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"No",
     "Symantec SES Complete":"No",
     "Sysmon":"No",
     "Trellix":"No",
@@ -713,6 +748,7 @@
     "MDE":"No",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"No",
     "Symantec SES Complete":"No",
     "Sysmon":"No",
     "Trellix":"No",
@@ -733,6 +769,7 @@
     "MDE":"No",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"No",
     "Symantec SES Complete":"No",
     "Sysmon":"No",
     "Trellix":"No",
@@ -753,6 +790,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"No",
     "Symantec SES Complete":"Via EnablingTelemetry",
     "Sysmon":"No",
     "Trellix":"No",
@@ -773,6 +811,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"Via EnablingTelemetry",
+    "Sophos":"No",
     "Symantec SES Complete":"Via EnablingTelemetry",
     "Sysmon":"No",
     "Trellix":"No",
@@ -793,6 +832,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"Via EventLogs",
     "Symantec SES Complete":"No",
     "Sysmon":"No",
     "Trellix":"No",
@@ -813,6 +853,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"Via EnablingTelemetry",
+    "Sophos":"No",
     "Symantec SES Complete":"No",
     "Sysmon":"Yes",
     "Trellix":"No",
@@ -833,6 +874,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"Via EnablingTelemetry",
+    "Sophos":"No",
     "Symantec SES Complete":"No",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -853,6 +895,7 @@
     "MDE":"Via EventLogs",
     "Qualys":"Yes",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"Via EnablingTelemetry",
     "Sysmon":"Yes",
     "Trellix":"Pending Response",
@@ -873,6 +916,7 @@
     "MDE":"Via EventLogs",
     "Qualys":"Yes",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"Via EnablingTelemetry",
     "Sysmon":"Yes",
     "Trellix":"Pending Response",
@@ -893,6 +937,7 @@
     "MDE":"Via EventLogs",
     "Qualys":"Yes",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"Via EnablingTelemetry",
     "Sysmon":"No",
     "Trellix":"Yes",
@@ -913,6 +958,7 @@
     "MDE":"No",
     "Qualys":"No",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"Via EnablingTelemetry",
     "Sysmon":"No",
     "Trellix":"Yes",
@@ -933,6 +979,7 @@
     "MDE":"Via EventLogs",
     "Qualys":"Yes",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"Via EnablingTelemetry",
     "Sysmon":"No",
     "Trellix":"Pending Response",
@@ -953,6 +1000,7 @@
     "MDE":"Yes",
     "Qualys":"Yes",
     "Sentinel One":"Yes",
+    "Sophos":"No",
     "Symantec SES Complete":"Via EnablingTelemetry",
     "Sysmon":"Yes",
     "Trellix":"Pending Response",
@@ -973,6 +1021,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"No",
     "Symantec SES Complete":"Partially",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -993,6 +1042,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"Via EventLogs",
     "Symantec SES Complete":"Partially",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -1013,6 +1063,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"No",
     "Symantec SES Complete":"Partially",
     "Sysmon":"Yes",
     "Trellix":"Yes",
@@ -1033,6 +1084,7 @@
     "MDE":"No",
     "Qualys":"No",
     "Sentinel One":"No",
+    "Sophos":"No",
     "Symantec SES Complete":"No",
     "Sysmon":"No",
     "Trellix":"Yes",
@@ -1053,6 +1105,7 @@
     "MDE":"Yes",
     "Qualys":"No",
     "Sentinel One":"Yes",
+    "Sophos":"Partially",
     "Symantec SES Complete":"Yes",
     "Sysmon":"No",
     "Trellix":"Yes",