Hi,
sometimes, need some external info to analyze Windows Event.
Try this one if want.
Regards
{
"displayName": "Search Windows EventID Description",
"cssClasses": [
"reference-id",
"reference.id"
],
"description": "",
"type": "UAP.common.contextmenu.actions.URLContextAction",
"version": "1",
"modules": [
"investigation"
],
"local": "false",
"groupName": "externalLookupGroup",
"urlFormat": "https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventID={0}",
"disabled": "",
"id": "windowsSearchEventid",
"moduleClasses": [
"UAP.investigation.navigate.view.NavigationPanel",
"UAP.investigation.events.view.EventGrid"
],
"openInNewTab": "true",
"order": "30"
}
