how to create the variable/watchlist from the existing field File_Path from AV logs.
Eg: The current field value File_Path = "C:\Program Files\bin\". But we need to extract the value "C:"
We plan to monitor/generate the report what are the drives are infected by malware.
Retrieving data ...