{"action":"opened","issue":{"url":"https://api.github.com/repos/pdoconnell/TA-microsoft-windefender/issues/2","repository_url":"https://api.github.com/repos/pdoconnell/TA-microsoft-windefender","labels_url":"https://api.github.com/repos/pdoconnell/TA-microsoft-windefender/issues/2/labels{/name}","comments_url":"https://api.github.com/repos/pdoconnell/TA-microsoft-windefender/issues/2/comments","events_url":"https://api.github.com/repos/pdoconnell/TA-microsoft-windefender/issues/2/events","html_url":"https://github.com/pdoconnell/TA-microsoft-windefender/issues/2","id":360314556,"node_id":"MDU6SXNzdWUzNjAzMTQ1NTY=","number":2,"title":"More Magic Values","user":{"login":"cbboggs","id":18554987,"node_id":"MDQ6VXNlcjE4NTU0OTg3","avatar_url":"https://avatars1.githubusercontent.com/u/18554987?v=4","gravatar_id":"","url":"https://api.github.com/users/cbboggs","html_url":"https://github.com/cbboggs","followers_url":"https://api.github.com/users/cbboggs/followers","following_url":"https://api.github.com/users/cbboggs/following{/other_user}","gists_url":"https://api.github.com/users/cbboggs/gists{/gist_id}","starred_url":"https://api.github.com/users/cbboggs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cbboggs/subscriptions","organizations_url":"https://api.github.com/users/cbboggs/orgs","repos_url":"https://api.github.com/users/cbboggs/repos","events_url":"https://api.github.com/users/cbboggs/events{/privacy}","received_events_url":"https://api.github.com/users/cbboggs/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-09-14T13:54:10Z","updated_at":"2018-09-14T13:54:10Z","closed_at":null,"author_association":"NONE","body":"This seems to be a list of SCEP/Defender event codes and magic values - many of which aren't in the TA. \r\n  \r\nWe've used this to supplement the TA to eval out other fields in the XML logs such as Action_Name, Execution_Name, Origin_Name, Source_Name, and Type_Name\r\n\r\nhttps://social.technet.microsoft.com/Forums/en-US/75336c42-612b-41dd-9617-46a372affebf/scep-2012-windows-event-ids?forum=configmanagersecurity\r\n\r\n"}}
{"actor":{"display_login":"cbboggs"}}