Webroot

Event logs

Unknown

Application specific logs

• C:\ProgramData\WRData

  • WRLog.log - scan results (inlcuding hashes for detections).
  • timestamps are in local time (DDD dd-mm-yyyy hh:mm:ss.ssss)

Registry

Data in the registry is stored here²:

• SOFTWARE --> WOW6432Node\WRData\
• Contains execution and monitoring times as well as hashes and detection names

References

---

1. WSABLogs User Guide ↩

2. webrool.pl ↩