| 1.1.5.2.2. Known Good File Collection Points? |
| 1.1.5.2.2.3. Sample Systems with SEP application learn enabled |
| 1.1.5.2.2.1. Microsoft Management Server or System Center Configuration Manager |
| 1.1.5.2.2.2. Software Repository Product |
| 1.1.5.2.2.4. Run checksum.exe on sample set of machines and extract |