Updated MicrosoftIISLogs definition with additional path (#621)

ForensicArtifacts · Mar 23, 2024 · 2206358 · 2206358
1 parent 2b479bc
commit 2206358
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/artifacts/data/webservers.yaml b/artifacts/data/webservers.yaml
@@ -100,8 +100,9 @@ sources:
 - type: FILE
   attributes:
     paths:
-    - '%%environ_systemroot%%\System32\LogFiles\W3SVC*\*.log'
     - '%%environ_systemdrive%%\inetpub\logs\LogFiles\*.log'
+    - '%%environ_systemdrive%%\inetpub\logs\LogFiles\W3SVC*\*.log'
     - '%%environ_systemdrive%%\Resources\Directory\*\LogFiles\Web\W3SVC*\*.log'
+    - '%%environ_systemroot%%\System32\LogFiles\W3SVC*\*.log'
     separator: '\'
 supported_os: [Windows]