how do i identify the source of a threat detected

 
Hello ?, Welcome to the Webroot Community,
 
 
Threats that were detected by Webroot are stored in quarantine.
 
You can view your quarantine by opening the Webroot PC interface (click Webroot icon in system tray).
 
Click on the gear next to PC Security in the upper right.
 
Then select the Quarantine tab on the next screen.
 
This will display the threats quarantined by Webroot. While this list doesn't contain the source of the infection it will contain the location on your computer where the threat was discovered as well as the time it was discovered. That information can then be used to help you narrow down the source of the infection. 
 
Perhaps some other members may chime in with their opinion as well.
I am not sure if there are other ways of identifying the source of a threat.
 
 
Sorry my answer wasn't definitive but these are the ways that I've used to research the source of threats found on computers that I manage.
 
Have a good day,
 
BD