google / google/grr

Hunt results split by collector type

Open
#204 2 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Python
Stars
5.1k
Forks
796
PR merge metrics
No merged PRs in 30d

Description

If I set up a hunt with multiple artifact collectors, like all of the WindowsWinlogon\* artifacts, I would like to be able to search for the results from each individual collector without having to create a unique hunt for each one. Adding some identifier into the results to note that it was gathered by the WindowsWinlogonUserinit artifact would be awesome.

This would also help with potentially splitting up the returned files as they would be associated with a result set. (Related to Issue #155.)

It would also make searching within the results easier when you want to compare a particular artifact across multiple hosts.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.