Sophos Universal Reader and Finder (SURF)

Sophos Universal Reader and Finder (SURF) is a support utility created to automate the extraction and analysis of the Sophos support log bundles – the SDU and CTR – from Sophos Central Endpoint and SFOS respectively. The tool is meant to provide easy access to the contents of these bundles, extracting summary data and providing a search capability that lets a user search the contained logs.

SURF was developed for Sophos Support Engineers and Partners to allow easier and more in-depth troubleshooting and investigations.

SURF supports SDUs from Sophos Central Endpoints and CTRs from SFOS 17+.