# VIPRE Logs

## Overview

**Evidence:** VIPRE Logs\
**Description:** Collect VIPRE Logs\
**Category:** Applications\
**Platform:** windows\
**Short Name:** vprls\
**Is Parsed:** No\
**Sent to Investigation Hub:** No\
**Collect File(s):** Yes

## Background

VIPRE (formerly GFI AntiMalware and Sunbelt AntiMalware) is a business security solution that maintains logs across multiple product iterations. It stores logs in both system-wide ProgramData and user-specific AppData locations.

## Data Collected

This collector gathers structured data about vipre logs.

## Collection Method

This collector gathers VIPRE logs from current and legacy installations including VIPRE Business Agent, GFI Software AntiMalware, and Sunbelt Software AntiMalware directories.

## Forensic Value

VIPRE logs provide evidence of malware detections, business endpoint security events, and threat activities across different product versions. They're valuable for investigating security incidents in business environments.
