Hi magna86,

Almost convinced it was a false positive, rather a generic pup of sorts, but then again no, because I installed it intentionally.
And you were aware that I used it as you worked through analysis of the log data…
On VT is even gets seven flags. But as one does have need of zoek.exe any longer it is best being uninstalled…
because you always work the latest version of the tool…

polonus