Eric Partington

Context Menu - Microsoft EventID

Blog Post created by Eric Partington Employee on Dec 15, 2016

Working with Microsoft EventIDs ? ever use the excellent site Ultimate Windows Security to track down eventIDs ?

 

Here is a context menu to enable right click actions from the reference.id metakey to pivot into the website for security events.  Helps reduce the select , ctrl+c, alt+tab, ctrl+v.

 

administration > system > context menu

 

{
    "displayName": "[MS EventID Lookup]",
    "cssClasses": [
        "reference.id",
        "reference-id"
    ],
    "description": "",
    "type": "UAP.common.contextmenu.actions.URLContextAction",
    "version": "1",
    "modules": [
        "investigation"
    ],
    "local": "false",
    "groupName": "externalLookupGroup",
    "urlFormat": "https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid={0}",
    "disabled": "",
    "id": "MSEventIDLookup",
    "moduleClasses": [
        "UAP.investigation.navigate.view.NavigationPanel",
        "UAP.investigation.events.view.EventGrid"
    ],
    "openInNewTab": "true",
    "order": ""
}

Outcomes