Graylog2 / Graylog2/illuminate-documentation

Windows Registry: Add registry fields

Open
#104 0 comments 0 reactions 0 assignees View on GitHub
needs-discussion triaged
Dominant language
HTML
Stars
2
Forks
0
PR merge metrics
No merged PRs in 30d

Description

**Please describe what you are requesting**
We may want to add Windows registry fields.
**Describe what change you are proposing**
Our GIM model uses:
registry_path Example: HKLM\Software\MyCo
registry_path_new

Other useful registry fields:
registry_type Example: REG_DWORD
registry_data Example: fe222ead
registry_value Example: Data

Command example: `reg add HKLM\Software\MyCo /v Data /t REG_BINARY /d fe222ead`

**Describe the log source**
Log Source: Windows

Contributor guide

Open the contributing guide

Research direction

No file, test, or entry point is named. Start by locating the GIM model and its existing Windows log-source fields, then determine how registry_path, registry_path_new, registry_type, registry_data, and registry_value should be represented; done means the requested fields and their documented examples are accepted.

Written by the indexing model from the issue text.

Assessment

Domain
documentation
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.