There are a lot of interesting things happening with Sophos Security Products these days. With the recent release of Intercept X with EDR you have even more information for forensic analysis of malware attacks.
To get the best results from your installation you need to have a Sophos XG Firewall, Sophos Central Enpoint and Intercept X. Here is a case study some of the improvements in Root Cause Analysis in Intercept X.