BTCPay Server install artifacts and version evidence (files and network)

Identifies the installation, execution, or network activity associated with BTCPay Server across endpoints by searching file and network event tables for application artifacts, configuration files, and listening or established connections.