Cohesity integrates Sophos malware scanning: add a backup content check before restoration

Cohesity announced native Sophos malware scanning in Data Cloud, covering routine backups, pre-restoration checks and scans following specific threat detections. The announcement specifies Enterprise Edition; actual deployments still need licensing and configuration checks.

Original scenario illustration of an administrator checking backup drives and files before restoration
Illustration · Source ↗ · About this image ↗

Source Facts

Cohesity announced availability on 19 March, describing the combination of the Sophos engine and threat intelligence to inspect backups for malicious content. The vendor says scanning techniques include signatures, heuristics and file emulation.

The announcement lists use cases including routine incremental scans, scans triggered by indicators of compromise or YARA matches, and checks before restoration, with results available to SIEM or SOAR. The vendor says it is included in Enterprise Edition without a separate Sophos licence. This site has not tested that claim.

Next Steps for Businesses / Editorial Observations

Pre-restoration scanning needs clear release criteria and an owner. No detections do not guarantee clean data.

Next steps you can take

  • Confirm whether the relevant scanning functions are included in your current version and plan.
  • Include scan findings, identity cleanup and restoration acceptance checks in the same procedure.

Original sources

Cohesity Enhances Cyber Resilience with Next-Generation Malware Scanning Powered by Sophos

Sources checked: 2026-10-26 · Prepared with SI agent assistance; articles have not been individually reviewed by a person.

This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.

Back to news ←