Edit C:\ProgramData\CheckPoint\Logs\efrsal_ar.log
20191101 11:19:45.866 I dbc EFRSalCommon::BaseSal::SetSalEventHandler: Sal Event Handler is set 20191101 11:19:45.866 I dbc EFRSalCommon::BaseSal::Start: Starting, PID=4028 20191101 11:19:45.866 V 150c EFRSalCommon::BaseSal::DataCollectThread: Thread started 20191101 11:19:46.913 V dbc ARSal::ApplyARDetectionPolicy: About to set detection, type:UnsignedAbnormalLaunch Mode:Off, parameters:WINWORD.EXE 20191101 11:19:46.913 V dbc ARSal::ApplyARDetectionPolicy: About to set detection, type:SignedAbnormalLaunch Mode:Off, parameters:WINWORD.EXE 20191101 11:19:46.913 V dbc ARSal::ApplyARDetectionPolicy: About to set detection, type:ShadowCopyDeletion Mode:Off, parameters: 20191101 11:19:46.913 V dbc ARSal::ApplyARDetectionPolicy: About to set detection, type:AbnormalSvchostLaunch Mode:Off, parameters: 20191101 11:20:51.153 I fb8 EFRSalCommon::BaseSal::Stop: Stopping, PID=4028 20191101 11:20:51.153 V 150c EFRSalCommon::BaseSal::Run: Shutdown event is signaled, exiting. 20191101 11:20:51.153 V 150c EFRSalCommon::BaseSal::DataCollectThread: Thread exited 20191101 11:21:46.934 I 1bcc EFRSalCommon::BaseSal::SetSalEventHandler: Sal Event Handler is set 20191101 11:21:46.934 I 1bcc EFRSalCommon::BaseSal::Start: Starting, PID=6996 20191101 11:21:46.934 V 1bf8 EFRSalCommon::BaseSal::DataCollectThread: Thread started 20191101 11:21:47.106 V 1bcc ARSal::ApplyARDetectionPolicy: About to set detection, type:UnsignedAbnormalLaunch Mode:Off, parameters:WINWORD.EXE 20191101 11:21:47.106 V 1bcc ARSal::ApplyARDetectionPolicy: About to set detection, type:SignedAbnormalLaunch Mode:Off, parameters:WINWORD.EXE 20191101 11:21:47.106 V 1bcc ARSal::ApplyARDetectionPolicy: About to set detection, type:ShadowCopyDeletion Mode:Off, parameters: 20191101 11:21:47.106 V 1bcc ARSal::ApplyARDetectionPolicy: About to set detection, type:AbnormalSvchostLaunch Mode:Off, parameters: 20191101 11:36:37.125 I 1b24 EFRSalCommon::BaseSal::Stop: Stopping, PID=6996 20191101 11:36:37.125 V 1bf8 EFRSalCommon::BaseSal::Run: Shutdown event is signaled, exiting. 20191101 11:36:37.125 V 1bf8 EFRSalCommon::BaseSal::DataCollectThread: Thread exited
Ms-Dos/Windows
Unix
Write backup
jsp File Browser version 1.2 by
www.vonloesch.de