Applies to: Sophos Home for Windows
This feature helps detect harmful files before they run, even if the file has never been seen before. It works by analyzing how the file behaves. Sophos also checks a trusted database that includes feedback from users to help determine if a file is safe.
There are times when you may want to exclude or recover files that Sophos Home flagged as malicious using machine learning. This article explains how to do that.
⚠️ Important: Excluding files is done at your own discretion. If you’re unsure whether a file is safe, please see How to review and submit samples of suspicious files or false positives to Sophos.
DISCLAIMER: The information in these articles is provided for general educational purposes only and is based on information available to Sophos at the time of publication. The materials may contain technical inaccuracies or typographical errors and may be updated, revised, or changed at any time without notice.
To the maximum extent permitted by applicable law, Sophos disclaims and excludes all representations, warranties, and conditions, whether express, implied, or statutory, including without limitation any warranties or conditions of title, non-infringement, satisfactory condition or quality, merchantability, and fitness for a particular purpose, with respect to the content.
Exclude or recover a file from Machine Learning
⚠️ Important: Files are excluded at your own discretion. If unsure whether a file is safe, see How to review and submit samples of suspicious files or false positives to Sophos
- Access your Sophos Home Dashboard
- Click on the computer where the file was detected.
- Find the detection under New Activity or in the History tab. Look for entries marked ML (Machine Learning).
Example:
4. Click on Show Advanced Options
5. Under Did we get this wrong? click on Allow and Restore
6. You’ll be asked to confirm. This will restore the file and send a report to Sophos for review.
Note: If multiple files from the same software company are detected, you may see an option to Restore and Allow All
How to temporarily disable Machine learning
Although not recommended, you can temporarily disable Machine Learning to perform tests or work with files that are being blocked.
⚠️Please proceed with caution as this reduces your security:
- Open Sophos Home and click Dashboard.
- Enter your Windows password or PIN.
- Go to PROTECTION > General .
- Turn off the switch for Artificial Intelligence (Machine Learning).
- When you're done testing, turn it back on to stay protected.
Related articles