Install Logs

[absrdst]

Greetings and Good Afternoon - I am conducting a forensic investigation and would like to know if there are logs that record user information at the time mbam is installed on a system?  I would like to know what user installed the software and it does not appear to be captured within the standard mbam LOGS directory.  Any information would be greatly appreciated.  Thank you.

[Porthos]

12 minutes ago, absrdst said:

I am conducting a forensic investigation and would like to know if there are logs that record user information at the time mbam is installed on a system?

I will ask staff member @LiquidTension to provide that info of possible.

[Maurice Naggar]

Hello @absrdst    One can get the Date & Time of the last Malwarebytes for Windows setup run by going to these 2 locations via Windows File Explorer.

They wont have the 'user' mentioned in the logs themselves.   However, the 1st one listed below is dependent on the logged-in-Windows user profile.

 %temp%\mbsetup.log 

and    %systemroot%\temp\mbamiservice.log

[absrdst]

Hi @Maurice Naggar Thank you very much for the reply and the information.  It is much appreciated.  Have a great rest of your evening!

[Maurice Naggar]

Y.  W.