cancel
Showing results for 
Search instead for 
Did you mean: 

how to create the variable/watchlist

how to create the variable/watchlist from the existing field File_Path from AV logs.


Eg: The current field value File_Path = "C:\Program Files\bin\". But we need to extract the value "C:"

We plan to monitor/generate the report what are the drives are infected by malware.