This article describes what information is added to SAV.TXT when a file is submitted to Sophos Labs, it also contains a SAVI based method of logging all SXL queries (Not recommended in most cases).
↧