Monitoring/Archiving Server:
%ProgramFiles%\Microsoft Lync Server 2013\Monitoring Server\QoE Monitoring\QmsSvc.exe
%ProgramFiles%\Microsoft Lync Server 2013\Server\Replica Replicator Agent\ReplicaReplicatorAgent.exe
%ProgramFiles%\Microsoft Lync Server 2013\Archiving Server\RTCArch.exe
%ProgramFiles%\Microsoft Lync Server 2013\Monitoring Server\Call Detail Recording\RtcCdr.exe

SQL Server Processes:
%ProgramFiles%\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\SQLServr.exe

Directories:
%systemroot%\System32\LogFiles
%systemroot%\SysWow64\LogFiles