Glossary: Logs and Data Sources for Investigations
Antivirus
Also written: AV
Software that checks files against signatures of known bad files and can quarantine the ones that match. It misses new tools until someone writes a signature for them.
Where the book teaches it
Related terms
ClamAVSignatureEDR (endpoint detection and response)Endpoint logs