fox-it/acquire

Collect CarbonBlack logs

Closed this issue · 0 comments

yunzheng commented

CarbonBlack logs can contain interesting information, they reside in the following directory on Windows:

  • c:\ProgramData\CarbonBlack\Logs

    Some example log files in this directory:

  • confer.log and confer.log.\*.zip

  • cblr.log

  • SensorAlarms.log

    However, all logs in this directory can be of interest.