Skip to content

Commit ca53bad

Browse files
Add Trend Micro log paths (#73)
1 parent ef8c5ed commit ca53bad

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

acquire/acquire.py

+4
Original file line numberDiff line numberDiff line change
@@ -560,6 +560,8 @@ class Tasks(Module):
560560
("dir", "sysvol/windows/tasks"),
561561
("dir", "sysvol/windows/system32/tasks"),
562562
("dir", "sysvol/windows/syswow64/tasks"),
563+
("dir", "sysvol/windows/sysvol/domain/policies"),
564+
("dir", "sysvol/windows/system32/GroupPolicy/DataStore/"),
563565
]
564566

565567

@@ -908,6 +910,8 @@ class AV(Module):
908910
# TotalAV
909911
("glob", "sysvol/Program Files*/TotalAV/logs"),
910912
("dir", "sysvol/ProgramData/TotalAV/logs"),
913+
# Trendmicro
914+
("glob", "sysvol/Program Files*/Trend Micro"),
911915
# VIPRE
912916
("dir", "sysvol/ProgramData/VIPRE Business Agent/Logs"),
913917
("dir", "AppData/Roaming/VIPRE Business", from_user_home),

0 commit comments

Comments
 (0)