Skip to content

Glossary: Logs and Data Sources for Investigations

Antivirus

Also written: AV

Software that checks files against signatures of known bad files and can quarantine the ones that match. It misses new tools until someone writes a signature for them.

Where the book teaches it

Related terms

ClamAVSignatureEDR (endpoint detection and response)Endpoint logs