During a security review, an analyst reads the following log line: 'Threat detected: Win32/Emotet in C:\Users\jsmith\Downloads\invoice.exe — Action taken: Quarantined. Signature version 1.389.204.0.' The analyst must map this event to the correct source technology so it can be correlated with other data. Which source technology most likely produced this event?