Skip to main content
DFIRHub
  • Artifacts
  • Collections
  • Builder
  • Converter

Navigate

ArtifactsCollectionsBuilderConverter
GitHub(opens in new tab)
  1. Home
  2. /Artifacts
  3. /Antivirus

Antivirus artifacts

29 KAPE targets for Windows forensic collection in the Antivirus category.

Targets

29 in the Antivirus category

All artifacts
  • AVGAVG Antivirus Data7 paths
  • AvastAvast Antivirus Data6 paths
  • AviraAVLogsAvira Logs3 paths
  • BitdefenderBitdefender Antivirus Data3 paths
  • CombofixComboFix Antivirus Data1 path
  • CrowdStrikeFalconCrowdStrike Falcon1 path
  • CybereasonCybereason Sensor/Detection Logs3 paths
  • CylanceCylance Antivirus Logs3 paths
  • ESETESET Antivirus Data6 paths
  • ElasticDefendElastic Defend Data3 paths
  • EmsisoftEmsisoft Antivirus Logs1 path
  • FSecureF-Secure Antivirus Data3 paths
  • HitmanProHitmanPro Antivirus Data4 paths
  • MalwarebytesMalwarebytes Data4 paths
  • McAfeeMcAfee Log Files15 paths
  • McAfee_ePOMcAfee ePO Log Files5 paths
  • MicrosoftSafetyScannerMicrosoft Safety Scanner1 path
  • RogueKillerRogueKiller Anti-Malware (by Adlice Software)1 path
  • SUPERAntiSpywareSUPERAntiSpyware Data1 path
  • SecureAgeSecureAge Antivirus Logs1 path
  • SentinelOneSentinel One Logs1 path
  • SophosSophos Data1 targets
  • Symantec_AV_LogsSymantec AV Logs1 targets
  • TotalAVTotalAV Antivirus Data2 paths
  • TrendMicroTrend Micro Data4 paths
  • VIPREVIPRE Data4 paths
  • WebrootWebroot Antivirus1 path
  • WinDefendDetectionHistWindows Defender Threat DetectionHistory files1 path
  • WindowsDefenderWindows Defender Data9 paths
29 targetsKapeFiles/Targets/Antivirus(opens in new tab)

Other categories

  • Apps
  • Browsers
  • Compound
  • Logs
  • P2P
  • Windows
DFIRHub

The comprehensive resource for Windows forensic artifacts. Search, explore, and generate collection scripts for DFIR investigations.

Navigate

All ArtifactsCollectionsScript BuilderSigma Converter

Resources

GitHub(opens in new tab)KapeFiles(opens in new tab)KAPE Documentation(opens in new tab)SANS KAPE(opens in new tab)

© 2026 DFIRHub. Data sourced from KapeFiles