{"action":"created","issue":{"url":"https://api.github.com/repos/williballenthin/python-evtx/issues/43","repository_url":"https://api.github.com/repos/williballenthin/python-evtx","labels_url":"https://api.github.com/repos/williballenthin/python-evtx/issues/43/labels{/name}","comments_url":"https://api.github.com/repos/williballenthin/python-evtx/issues/43/comments","events_url":"https://api.github.com/repos/williballenthin/python-evtx/issues/43/events","html_url":"https://github.com/williballenthin/python-evtx/issues/43","id":267723856,"number":43,"title":"UnicodeDecodeError: 'utf-16-le' codec can't decode bytes in position 0-1: illegal UTF-16 surrogate","user":{"login":"MNWPRO","id":29529706,"avatar_url":"https://avatars1.githubusercontent.com/u/29529706?v=4","gravatar_id":"","url":"https://api.github.com/users/MNWPRO","html_url":"https://github.com/MNWPRO","followers_url":"https://api.github.com/users/MNWPRO/followers","following_url":"https://api.github.com/users/MNWPRO/following{/other_user}","gists_url":"https://api.github.com/users/MNWPRO/gists{/gist_id}","starred_url":"https://api.github.com/users/MNWPRO/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MNWPRO/subscriptions","organizations_url":"https://api.github.com/users/MNWPRO/orgs","repos_url":"https://api.github.com/users/MNWPRO/repos","events_url":"https://api.github.com/users/MNWPRO/events{/privacy}","received_events_url":"https://api.github.com/users/MNWPRO/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2017-10-23T15:58:43Z","updated_at":"2017-10-24T16:38:25Z","closed_at":null,"author_association":"NONE","body":"i don't know  why,i need your help"},"comment":{"url":"https://api.github.com/repos/williballenthin/python-evtx/issues/comments/339053158","html_url":"https://github.com/williballenthin/python-evtx/issues/43#issuecomment-339053158","issue_url":"https://api.github.com/repos/williballenthin/python-evtx/issues/43","id":339053158,"user":{"login":"williballenthin","id":156560,"avatar_url":"https://avatars3.githubusercontent.com/u/156560?v=4","gravatar_id":"","url":"https://api.github.com/users/williballenthin","html_url":"https://github.com/williballenthin","followers_url":"https://api.github.com/users/williballenthin/followers","following_url":"https://api.github.com/users/williballenthin/following{/other_user}","gists_url":"https://api.github.com/users/williballenthin/gists{/gist_id}","starred_url":"https://api.github.com/users/williballenthin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/williballenthin/subscriptions","organizations_url":"https://api.github.com/users/williballenthin/orgs","repos_url":"https://api.github.com/users/williballenthin/repos","events_url":"https://api.github.com/users/williballenthin/events{/privacy}","received_events_url":"https://api.github.com/users/williballenthin/received_events","type":"User","site_admin":false},"created_at":"2017-10-24T16:38:25Z","updated_at":"2017-10-24T16:38:25Z","author_association":"OWNER","body":"@MNWPRO can you use the windows event viewer to display event number 508 from the sysmon log? i can see that there is some encoded data, possibly in chinese, but i'm not sure what its supposed to be. if you can include a screenshot here that would be a big help."}}
{"actor":{"display_login":"williballenthin"}}