More logs for the report

[david-risney]

Add more info to the report:

• The Watson bucket id are logged in event log. If possible, you should ask the customer to share the %SystemRoot%\System32\Winevt\Logs\Application.evtx file. The events can be viewed by Event Viewer (eventvwr.exe). The events to view are "Windows Logs/Application" events from "Application Error" and "Windows Error Reporting".
• Windows event logs are very useful source of information. The following events should be useful: %SystemRoot%\System32\Winevt\Logs\Application.evtx, which contains Watson info if crash happens. %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx (Microsoft-Windows-CodeIntegrity/Operational), which contains events about code integrity check failures that could cause webview renderer process to fail to launch.
• reg export HKCU\SOFTWARE\Microsoft\EdgeUpdate\ClientState EdgeRegistryUser.txt reg export HKLM\SOFTWARE\Microsoft\EdgeUpdate\ClientState EdgeRegistryMachine.txt /reg:32 dir "c:\Program Files (x86)\Microsoft\EdgeWebView" /s > EdgeFiles.txt dir "c:\Program Files (x86)\Microsoft\EdgeCore" /s >> EdgeFiles.txt And share the files: EdgeRegistryUser.txt, EdgeRegistryMachine.txt and EdgeFiles.txt And the Edge installer logs if they exists: %systemroot%\Temp\msedge_installer.log %ProgramData%\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log %localappdata%\Temp\msedge_installer.log %localappdata%\Temp\MicrosoftEdgeUpdate.log

[david-risney]

The msedge_installer and MicrosoftEdgeUpdate log files are getting added. Still left:

• [ ] reg export HKCU\SOFTWARE\Microsoft\EdgeUpdate\ClientState EdgeRegistryUser.txt reg export HKLM\SOFTWARE\Microsoft\EdgeUpdate\ClientState EdgeRegistryMachine.txt /reg:32
• [ ] dir "c:\Program Files (x86)\Microsoft\EdgeWebView" /s > EdgeFiles.txt dir "c:\Program Files (x86)\Microsoft\EdgeCore" /s >> EdgeFiles.txt
• [ ] The Watson bucket id are logged in event log. If possible, you should ask the customer to share the %SystemRoot%\System32\Winevt\Logs\Application.evtx file. The events can be viewed by Event Viewer (eventvwr.exe). The events to view are "Windows Logs/Application" events from "Application Error" and "Windows Error Reporting".
• [ ] Windows event logs are very useful source of information. The following events should be useful: %SystemRoot%\System32\Winevt\Logs\Application.evtx, which contains Watson info if crash happens. %SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx (Microsoft-Windows-CodeIntegrity/Operational), which contains events about code integrity check failures that could cause webview renderer process to fail to launch.