Add a WTI rule to catch disks failing to attach (#11886)

.github/actions/triage/action.yml

@@ -51,6 +51,6 @@ runs:
                 $maybe_previous_body = @("--previous-issue-body", "previous_body.txt")
             }
             
-            curl.exe -L https://github.com/OneBlue/wti/releases/download/v0.1.10/wti.exe -o triage/wti.exe
+            curl.exe -L https://github.com/OneBlue/wti/releases/download/v0.1.11/wti.exe -o triage/wti.exe
             
             cd triage && echo -n $message | .\wti.exe --issue ${{ inputs.issue }} --config config.yml --github-token "${{ inputs.token }}" --ignore-tags @maybe_message @maybe_comment @maybe_previous_body

triage/config.yml

@@ -228,12 +228,27 @@ rules:
             field7: error
       oneshot: true
 
+    - logline:
+        provider: Microsoft-Windows-VHDMP
+        task: VHD_VIRTUAL_DISK_HANDLE_CREATE_TASK
+        event: 'Microsoft-Windows-VHDMP/VHD_VIRTUAL_DISK_HANDLE_CREATE_TASK/win:Stop'
+        field1: {not: '0x00000000'}
+      set:
+          name: disk-attach-error
+          capture:
+            field1: error
+            field2: vhdpath
+
 actions:
     - foreach:
         var: user-visible-error
         debug_message: 'Detected user visible error: $error'
         skip_similar_issues: false
 
+    - foreach:
+        var: disk-attach-error
+        debug_message: 'Found evidence of disk failing to attach. Error: $error, Path: $vhdpath'
+
     - when:
         condition: 'init-crash'
         debug_message: 'Found evidence of init crash: $error'