Merge branch 'main' into DIS-2703_WinGUI_Acquire

fox-it · Feb 1, 2024 · 473e984 · 473e984
2 parents 73ed2f1 + 2173d92
commit 473e984
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/acquire/acquire.py b/acquire/acquire.py
@@ -1008,6 +1008,19 @@ class AV(Module):
         ("dir", "sysvol/ProgramData/Mcafee/VirusScan"),
         ("dir", "sysvol/ProgramData/McAfee/Endpoint Security/Logs"),
         ("dir", "sysvol/ProgramData/McAfee/MSC/Logs"),
+        ("dir", "sysvol/ProgramData/McAfee/Agent/AgentEvents"),
+        ("dir", "sysvol/ProgramData/McAfee/Agent/logs"),
+        ("dir", "sysvol/ProgramData/McAfee/datreputation/Logs"),
+        ("dir", "sysvol/ProgramData/Mcafee/Managed/VirusScan/Logs"),
+        ("dir", "sysvol/Documents and Settings/All Users/Application Data/McAfee/Common Framework/AgentEvents"),
+        ("dir", "sysvol/Documents and Settings/All Users/Application Data/McAfee/MCLOGS/SAE"),
+        ("dir", "sysvol/Documents and Settings/All Users/Application Data/McAfee/datreputation/Logs"),
+        ("dir", "sysvol/Documents and Settings/All Users/Application Data/McAfee/Managed/VirusScan/Logs"),
+        ("dir", "sysvol/Program Files (x86)/McAfee/DLP/WCF Service/Log"),
+        ("dir", "sysvol/Program Files (x86)/McAfee/ePolicy Orchestrator/Apache2/Logs"),
+        ("dir", "sysvol/Program Files (x86)/McAfee/ePolicy Orchestrator/DB/Events"),
+        ("dir", "sysvol/Program Files (x86)/McAfee/ePolicy Orchestrator/DB/Events/Debug"),
+        ("dir", "sysvol/Program Files (x86)/McAfee/ePolicy Orchestrator/Server/Logs"),
         # RogueKiller
         ("glob", "sysvol/ProgramData/RogueKiller/logs/AdliceReport_*.json"),
         # SUPERAntiSpyware