Windows Event Log Observable Schema
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 35/100
Research direction
Start by reviewing the proposed schema changes in the linked cti-stix2-json-schemas pull request and compare them with the existing MISP object definitions. Define a Windows Event Log object distinct from the default EVTX object produced by the Python parser, then verify that the new schema and relationships match the referenced proposal.
Written by the indexing model from the issue text.
Description
As proposed by @acabrol - create a new Windows Event log (different than the default EVTX from the Python parser) object:
https://github.com/oasis-open/cti-stix2-json-schemas/pull/75/files#diff-0
- Dominant language
- Python
- Stars
- 111
- Forks
- 140
- Avg merge
- 9h 2m
- Merged PRs (30d)
- 5
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from MISP/misp-objects
-
Difficulty 3/5 1-2 days Newbie friendliness 35/100
MISP/misp-objects#454 ·
-
topic:misp-core-change
Difficulty 3/5 1-2 days Newbie friendliness 35/100
MISP/misp-objects#443 · 3 comments ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 38/100
MISP/misp-objects#361 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 25/100
MISP/misp-objects#357 ·
-
new-object-template
Difficulty 2/5 1-3 hours Newbie friendliness 45/100
MISP/misp-objects#320 ·
All issues in MISP/misp-objects
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
Maintainers usually reply within 3 days
-
Negation with "not" and "no" is ignored during sentiment analysisPossibly taken @vivek-3728 claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
techcsispit/mess-mood#11 · 1 comment ·
-
changelog investigate
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
ramnes/notion-sdk-py#408 ·
-
good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 83/100
btclib-org/btclib-wallet#267 ·
Maintainers usually reply within 1 day
-
good first issue tech-debt
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
knnmelprop/YAADO#111 ·