Hi Dave, > To confirm, with the Team Cymru MHR feature enabled, the warnings and > VirusTotal URL outputs would appear in the Bro files.log? No, that information gets added to notice.log, not to files.log. Johanna