Skip to content

Add Windows event identifiers, designations, and error codes - #45

Merged
0x0bug merged 8 commits into
mainfrom
feat/event-error-identifiers
Sep 18, 2026
Merged

0x0bug merged 8 commits into
mainfrom
feat/event-error-identifiers

Conversation

@0x0bug

@0x0bug 0x0bug commented Sep 18, 2026

Copy link
Copy Markdown
Owner

Summary

Improves the Event Log report so Windows errors are easier to identify without reading only raw messages.

Each displayed event group now includes:

  • a stable Provider/Event ID identifier;
  • a concise human-readable designation;
  • hexadecimal error codes such as HRESULT/NTSTATUS values when they are present in the event text.

Known high-signal events reuse their documented WDT designation. Generic events derive the designation from the event's own message instead of inventing a diagnosis.

Safety

This is presentation/context only. Generic Event Log errors still do not automatically become WDT findings, so the existing conservative classification model is unchanged.

Tests

Adds coverage for code extraction, deduplication, designation generation, stable event identifiers, and rendered output.

@0x0bug
0x0bug merged commit 1c0d389 into main Sep 18, 2026
3 of 5 checks passed
@0x0bug
0x0bug deleted the feat/event-error-identifiers branch September 18, 2026 06:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant