Windows EventID External Search

Document created by Massimiliano Faudarole on Aug 19, 2015
Version 1Show Document
  • View in full screen mode

Hi,

 

sometimes, need some external info to analyze Windows Event.

 

Try this one if want.

 

Regards

 

 

{

    "displayName": "Search Windows EventID Description",

    "cssClasses": [

        "reference-id",

        "reference.id"

    ],

    "description": "",

    "type": "UAP.common.contextmenu.actions.URLContextAction",

    "version": "1",

    "modules": [

        "investigation"

    ],

    "local": "false",

    "groupName": "externalLookupGroup",

    "urlFormat": "https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventID={0}",

    "disabled": "",

    "id": "windowsSearchEventid",

    "moduleClasses": [

        "UAP.investigation.navigate.view.NavigationPanel",

        "UAP.investigation.events.view.EventGrid"

    ],

    "openInNewTab": "true",

    "order": "30"

}

Attachments

    Outcomes