{"action":"created","issue":{"url":"https://api.github.com/repos/unixist/cryptostalker/issues/14","repository_url":"https://api.github.com/repos/unixist/cryptostalker","labels_url":"https://api.github.com/repos/unixist/cryptostalker/issues/14/labels{/name}","comments_url":"https://api.github.com/repos/unixist/cryptostalker/issues/14/comments","events_url":"https://api.github.com/repos/unixist/cryptostalker/issues/14/events","html_url":"https://github.com/unixist/cryptostalker/issues/14","id":164420257,"number":14,"title":"Notify user with GUI popup and/or system logging facility when malware is detected","user":{"login":"unixist","id":2461107,"avatar_url":"https://avatars.githubusercontent.com/u/2461107?v=3","gravatar_id":"","url":"https://api.github.com/users/unixist","html_url":"https://github.com/unixist","followers_url":"https://api.github.com/users/unixist/followers","following_url":"https://api.github.com/users/unixist/following{/other_user}","gists_url":"https://api.github.com/users/unixist/gists{/gist_id}","starred_url":"https://api.github.com/users/unixist/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/unixist/subscriptions","organizations_url":"https://api.github.com/users/unixist/orgs","repos_url":"https://api.github.com/users/unixist/repos","events_url":"https://api.github.com/users/unixist/events{/privacy}","received_events_url":"https://api.github.com/users/unixist/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/unixist/cryptostalker/labels/help%20wanted","name":"help wanted","color":"128A0C"}],"state":"open","locked":false,"assignee":{"login":"cy-fir","id":10007890,"avatar_url":"https://avatars.githubusercontent.com/u/10007890?v=3","gravatar_id":"","url":"https://api.github.com/users/cy-fir","html_url":"https://github.com/cy-fir","followers_url":"https://api.github.com/users/cy-fir/followers","following_url":"https://api.github.com/users/cy-fir/following{/other_user}","gists_url":"https://api.github.com/users/cy-fir/gists{/gist_id}","starred_url":"https://api.github.com/users/cy-fir/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cy-fir/subscriptions","organizations_url":"https://api.github.com/users/cy-fir/orgs","repos_url":"https://api.github.com/users/cy-fir/repos","events_url":"https://api.github.com/users/cy-fir/events{/privacy}","received_events_url":"https://api.github.com/users/cy-fir/received_events","type":"User","site_admin":false},"assignees":[{"login":"cy-fir","id":10007890,"avatar_url":"https://avatars.githubusercontent.com/u/10007890?v=3","gravatar_id":"","url":"https://api.github.com/users/cy-fir","html_url":"https://github.com/cy-fir","followers_url":"https://api.github.com/users/cy-fir/followers","following_url":"https://api.github.com/users/cy-fir/following{/other_user}","gists_url":"https://api.github.com/users/cy-fir/gists{/gist_id}","starred_url":"https://api.github.com/users/cy-fir/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cy-fir/subscriptions","organizations_url":"https://api.github.com/users/cy-fir/orgs","repos_url":"https://api.github.com/users/cy-fir/repos","events_url":"https://api.github.com/users/cy-fir/events{/privacy}","received_events_url":"https://api.github.com/users/cy-fir/received_events","type":"User","site_admin":false}],"milestone":null,"comments":1,"created_at":"2016-07-07T22:18:57Z","updated_at":"2016-07-15T16:45:27Z","closed_at":null,"body":"The current mode of operation is to write to cryptostalker's stdout when malware is detected.\r\n\r\nIt'd be nice to alert the user in a way that they'll actually notice!"},"comment":{"url":"https://api.github.com/repos/unixist/cryptostalker/issues/comments/233004428","html_url":"https://github.com/unixist/cryptostalker/issues/14#issuecomment-233004428","issue_url":"https://api.github.com/repos/unixist/cryptostalker/issues/14","id":233004428,"user":{"login":"cy-fir","id":10007890,"avatar_url":"https://avatars.githubusercontent.com/u/10007890?v=3","gravatar_id":"","url":"https://api.github.com/users/cy-fir","html_url":"https://github.com/cy-fir","followers_url":"https://api.github.com/users/cy-fir/followers","following_url":"https://api.github.com/users/cy-fir/following{/other_user}","gists_url":"https://api.github.com/users/cy-fir/gists{/gist_id}","starred_url":"https://api.github.com/users/cy-fir/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cy-fir/subscriptions","organizations_url":"https://api.github.com/users/cy-fir/orgs","repos_url":"https://api.github.com/users/cy-fir/repos","events_url":"https://api.github.com/users/cy-fir/events{/privacy}","received_events_url":"https://api.github.com/users/cy-fir/received_events","type":"User","site_admin":false},"created_at":"2016-07-15T16:45:27Z","updated_at":"2016-07-15T16:45:27Z","body":"- [ ] Windows Event Log - v.1\r\n\r\n- !detect and raise event in log\r\n```\r\n\r\n1.   Lib: https://godoc.org/golang.org/x/sys/windows/svc/eventlog\r\n2.   create value structure\r\n3.   balloon (?)\r\n\r\n```\r\n\r\n- !ID ransomware strain and raise event in log \r\n```\r\n1.    once identified, raise event in system (if unable to decrypt, provide link to tool)``\r\n```\r\n\r\n\r\n- !Roadmap \r\n\r\n`1. Windows GUI interactive window with take action `\r\n\r\n- [ ]  MacOSX\r\n\r\n"}}
{"actor":{"display_login":"cy-fir"}}