From dc1a0a0c7d5e69a76dd2b294747950a804b0ffc6 Mon Sep 17 00:00:00 2001 From: "theAtropos4n6 (Evangelos D.)" <70748441+theAtropos4n6@users.noreply.github.com> Date: Wed, 1 Oct 2025 13:45:24 +0300 Subject: [PATCH 1/2] Update IISLogFiles.tkape FTP IIS logs were not being collected from this KAPE target. I updated it to collect FTP logs as well as any other service logs under the LogFiles directory. --- Targets/Logs/IISLogFiles.tkape | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/Targets/Logs/IISLogFiles.tkape b/Targets/Logs/IISLogFiles.tkape index 9869472dae..5136ef22e1 100644 --- a/Targets/Logs/IISLogFiles.tkape +++ b/Targets/Logs/IISLogFiles.tkape @@ -1,6 +1,6 @@ Description: IIS Log Files Author: Troy Larson -Version: 2.0 +Version: 3.0 Id: 701573f6-0ce1-454d-af41-612713e22af5 RecreateDirectories: true Targets: @@ -34,6 +34,16 @@ Targets: Category: Logs Path: C:\Windows\system32\LogFiles\HTTPERR\ FileMask: '*.log' + - + Name: IIS log files + Category: Logs + Path: C:\inetpub\logs\LogFiles\FTPSVC*\ + FileMask: '*.log' + - + Name: IIS log files + Category: Logs + Path: C:\inetpub\logs\LogFiles\**\ + FileMask: '*.log' # Documentation # https://www.sumologic.com/blog/iis-log-files-location/ From 15c94385ac6bb5031430c932415a87427a611201 Mon Sep 17 00:00:00 2001 From: "theAtropos4n6 (Evangelos D.)" <70748441+theAtropos4n6@users.noreply.github.com> Date: Wed, 1 Oct 2025 14:43:47 +0300 Subject: [PATCH 2/2] Update IISLogFiles.tkape Fixed typo --- Targets/Logs/IISLogFiles.tkape | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Targets/Logs/IISLogFiles.tkape b/Targets/Logs/IISLogFiles.tkape index 5136ef22e1..3187de00a7 100644 --- a/Targets/Logs/IISLogFiles.tkape +++ b/Targets/Logs/IISLogFiles.tkape @@ -42,7 +42,8 @@ Targets: - Name: IIS log files Category: Logs - Path: C:\inetpub\logs\LogFiles\**\ + Path: C:\inetpub\logs\LogFiles\*\ + Recursive: true FileMask: '*.log' # Documentation