Which folders on the file system correspond to which Endpoint Protection definitions?
search cancel

Which folders on the file system correspond to which Endpoint Protection definitions?

book

Article ID: 164300

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

You want to know where, in the file system, Symantec Endpoint Protection (SEP) stores its definitions for each component.

Resolution

In all current Windows SEP clients, the definitions are kept in the following folders, depending on OS:

  • C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Definitions (Windows Vista/Server 2008 and newer)
  • C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Definitions (WinXP & Server 2003)

In the folder is a structure of subfolders which hold the definitions used for the various components. This structure varies slightly by version, as follows:

For SEP 12.1 clients:

  • BASHDefs - SEPC Behavior And Security Heuristics 12.1 - MicroDefsB.CurDefs
  • ccSubSDK_SCD_Defs - SEPC Submission Control Data - 12.1
  • EfaVTDefs - SEPC Extended File Attributes and Signatures 12.1 - MicroDefsB.CurDefs
  • HIDefs - SEPC HI Policy Contents Windows - 12.1
  • IPSDefs - CIDS Signatures 12.1 - MicroDefsB.CurDefs
  • IronRevocationDefs - SEPC Iron Revocation List 12.1 - MicroDefsB.CurDefs
  • IronSettingsDefs - SEPC Iron Settings 12.1 - MicroDefsB.CurDefs
  • IronWhitelistDefs - SEPC Iron Whitelist 12.1 - MicroDefsB.CurDefs
  • SMRDefs - SEPC SMR Definitions 12.1 - MicroDefsB.CurDefs
  • SRTSPSettingsDefs - SEPC SRTSP Settings - 12.1
  • VirusDefs - SEPC Virus Definitions 12.1 - MicroDefsB.CurDefs

For SEP 14 clients:

  • BASHDefs - SEPC Behavior And Security Heuristics 14.0 - MicroDefsB.CurDefs
  • ccSubSDK_SCD_Defs - SEPC Submission Control Data - 14.0
  • EDRDefs - SEPC EDR - 14.0
  • EfaVTDefs - SEPC Extended File Attributes and Signatures 14.0 - MicroDefsB.CurDefs
  • HIDefs - SEPC HI Policy Contents Windows - 14.0
  • IPSDefs - CIDS Signatures 14.0 - MicroDefsB.CurDefs
  • IronRevocationDefs - SEPC Iron Revocation List 14.0 - MicroDefsB.CurDefs
  • IronSettingsDefs - SEPC Iron Settings 14.0 - MicroDefsB.CurDefs
  • IronWhitelistDefs - SEPC Iron Whitelist 14.0 - MicroDefsB.CurDefs
  • SDSDefs - SEPC Virus Definitions SDS 14.0 - MicroDefsB.CurDefs
  • SEPDefs - EMPTY
  • SMRDefs - SEPC SMR Definitions 14.0 - MicroDefsB.CurDefs
  • SRTSPSettingsDefs - SEPC SRTSP Settings - 14.0
  • STICDefs - SEPC STIC - 14.0
  • VirusDefs - EMPTY
Powered by Wolken Software