You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: .github/ISSUE_TEMPLATE/NewMapRequest.yml
+14-9Lines changed: 14 additions & 9 deletions
Original file line number
Diff line number
Diff line change
@@ -1,10 +1,14 @@
1
-
name: New EvtxECmd Map Request
1
+
name: New EvtxECmd Map Request
2
2
description: Request for an EvtxECmd Map to be made for a currently unmapped event ID.
3
3
title: "[New Map Request]: Channel/Provider:ID"
4
4
labels: ["new map request", "needs triage"]
5
5
assignees:
6
6
- AndrewRathbun
7
7
body:
8
+
- type: markdown
9
+
attributes:
10
+
value: |
11
+
Thanks for taking the time to fill out this Map request!
8
12
- type: input
9
13
id: contact
10
14
attributes:
@@ -26,7 +30,7 @@ body:
26
30
attributes:
27
31
label: Channel
28
32
description: Please provide the Channel of the event ID of interest.
29
-
placeholder: ex. System
33
+
placeholder: ex. System
30
34
validations:
31
35
required: true
32
36
- type: input
@@ -36,7 +40,7 @@ body:
36
40
description: Please provide the Event ID of interest.
37
41
placeholder: ex. 7045
38
42
validations:
39
-
required: true
43
+
required: true
40
44
- type: checkboxes
41
45
id: existing-map
42
46
attributes:
@@ -49,10 +53,10 @@ body:
49
53
id: existing-provider-csv
50
54
attributes:
51
55
label: Is there an existing CSV for this specific Event Log Provider?
52
-
description: Please search to see if there is a pre-existing CSV for this Provider. https://github.com/nasbench/EVTX-ETW-Resources/tree/main/ETWProvidersCSVs
56
+
description: Please search to see if a pre-existing CSV exists for this Provider. https://github.com/nasbench/EVTX-ETW-Resources/tree/main/ETWProvidersCSVs
53
57
options:
54
58
- label: I have searched the existing Provider CSVs from the EVTX-ETW-Resources repo
55
-
required: true
59
+
required: false
56
60
- type: input
57
61
id: existing-provider-csv-link
58
62
attributes:
@@ -68,10 +72,10 @@ body:
68
72
description: Please provide an example of the event you want a Map created for. This can be found by pasting the contents of the Payload cell from EvtxECmd's CSV output. Ideally, double-click on the Payload cell of interest and use the Format button in Timeline Explorer before pasting here.
69
73
render: xml
70
74
placeholder: |
71
-
{
72
-
EventData:
75
+
{
76
+
EventData:
73
77
{
74
-
Data:
78
+
Data:
75
79
[
76
80
{
77
81
@Name: ServiceName,
@@ -105,7 +109,7 @@ body:
105
109
description: Tell us why this particular event deserves to be mapped in EvtxECmd.
106
110
placeholder: How has this event helped in your investigation? What does this event tell the examiner?
0 commit comments