Graylog2 / Graylog2/illuminate-documentation
Windows Registry: Add registry fields
- Dominant language
- HTML
- Stars
- 2
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
**Please describe what you are requesting**
We may want to add Windows registry fields.
**Describe what change you are proposing**
Our GIM model uses:
registry_path Example: HKLM\Software\MyCo
registry_path_new
Other useful registry fields:
registry_type Example: REG_DWORD
registry_data Example: fe222ead
registry_value Example: Data
Command example: `reg add HKLM\Software\MyCo /v Data /t REG_BINARY /d fe222ead`
**Describe the log source**
Log Source: Windows
Contributor guide
Research direction
No file, test, or entry point is named. Start by locating the GIM model and its existing Windows log-source fields, then determine how registry_path, registry_path_new, registry_type, registry_data, and registry_value should be represented; done means the requested fields and their documented examples are accepted.
Written by the indexing model from the issue text.
Assessment
- Domain
- documentation
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100