Feature Request: Expand support for .evtx files

yampelo / beagle

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

MIT License

1.27k stars 144 forks source link

Feature Request: Expand support for .evtx files #15

Open julieces opened 5 years ago

julieces commented 5 years ago

Currently there is only support for process creation events, we'd like to add support for additional event ids.

We'd like to work on this issue. Can you assign it to us? @julieces @carlyabraham @alishasonawalla

Thank you!!!

yampelo commented 5 years ago

Go for it! Submit a pull request with any code you want merged in and i'll review it. Please try and use the same style as the rest of the repo (I use the black formatter with a line length of 100) and type-hint your code as well as add test cases for anything you add.

You can look at #11 , #5 for examples