Create Security_Microsoft-Windows-Security-Auditing_4728.map

CluelessAtCoding commented 3 years ago

Create Map for Event ID 4728

Description

Create New Map for Event ID 4728

Checklist:

Please replace every instance of [ ] with [X]

[X] I have ensured a Provider is listed for the new Map(s) being submitted
[X] I have ensured the filename(s) of any new Map(s) being submitted follows the approved format, i.e. Channel-Name_Provider-Name_EventID.map. In summary, all spaces and special characters are replaced with a hyphen with an underscore separates Channel Name, Provider Name, and Event ID
[X] I have tested and validated the new Map(s) work with my test data and achieve the desired output
[X] I have provided example event data (# Example Event Data:) at the bottom of my Map(s), if possible
[X] I have consulted the Guide/Template to ensure my Map(s) follow the same format

Thank you for your submission and for contributing to the DFIR community!

AndrewRathbun commented 3 years ago

Looks great, thanks for following the template! Just be sure next time to remove trailing spaces and add the newline!

 Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:62:104: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:63:26: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:64:23: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:65:19: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:66:21: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:67:21: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:68:42: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:69:60: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:70:43: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:71:18: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:72:48: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:73:30: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:74:40: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:75:15: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:78:87: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:79:80: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:80:48: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:81:48: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:82:80: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:83:85: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:84:50: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:85:49: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:86:47: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:87:39: [error] trailing spaces (trailing-spaces)

CluelessAtCoding commented 3 years ago

Looks great, thanks for following the template! Just be sure next time to remove trailing spaces and add the newline!

 Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:62:104: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:63:26: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:64:23: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:65:19: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:66:21: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:67:21: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:68:42: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:69:60: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:70:43: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:71:18: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:72:48: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:73:30: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:74:40: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:75:15: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:78:87: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:79:80: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:80:48: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:81:48: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:82:80: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:83:85: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:84:50: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:85:49: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:86:47: [error] trailing spaces (trailing-spaces)
Error: Maps/Security_Microsoft-Windows-Security-Auditing_4728.map:87:39: [error] trailing spaces (trailing-spaces)

Apologies, I will do better next time :)

AndrewRathbun commented 3 years ago

You did fine! Minor things but the rest looked awesome. Thanks for your contribution 👍

EricZimmerman / evtx

Create Security_Microsoft-Windows-Security-Auditing_4728.map #165

Description

Checklist: