Similar to the "application protocols," but using the paths employed by Exchange. An elegant solution would be a parameter to specify "older than X days" as well as a check for the storage locations actually in use.
The default paths are:
C:\inetpub\logs\LogFiles / C:\Program Files\Microsoft\Exchange Server\V15\Logging / C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\Diagnostics\ETLTraces / C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\Diagnostics\Logs