Hunt results split by collector type
Open
enhancement
- Dominant language
- Python
- Stars
- 5.1k
- Forks
- 796
- PR merge metrics
- No merged PRs in 30d
Description
If I set up a hunt with multiple artifact collectors, like all of the WindowsWinlogon\* artifacts, I would like to be able to search for the results from each individual collector without having to create a unique hunt for each one. Adding some identifier into the results to note that it was gathered by the WindowsWinlogonUserinit artifact would be awesome.
This would also help with potentially splitting up the returned files as they would be associated with a result set. (Related to Issue #155.)
It would also make searching within the results easier when you want to compare a particular artifact across multiple hosts.
Contributor guide
Assessment
This issue has not been assessed yet.