Listed below are the SCCM Endpoint Protection log files and locations :
* EndpointProtectionAgent.log : Records details about the installation of the Endpoint Protection client and the application of antimalware policy to that client. (Location : Client)
* EPCtrlMgr.log : Records details about the syncing of malware threat information from the Endpoint Protection role server with the Configuration Manager database. (Location : Site system server)
* EPMgr.log : Monitors the status of the Endpoint Protection site system role. (Location : Site system server)
* EPSetup.log : Provides information about the installation of the Endpoint Protection site system role. (Location : Site system server)
