diff --git a/triage/config.yml b/triage/config.yml
index d28cc5b4..00edc4b1 100644
--- a/triage/config.yml
+++ b/triage/config.yml
@@ -84,7 +84,17 @@ rules:
         field1:
             regex: 'WSL (.*) ERROR'
       set: init-error
-      
+
+    - logline:
+        provider: Microsoft.Windows.Lxss.Manager
+        task: GuestLog
+        field1:
+            regex: 'init(.*) segfault'
+      set:
+        name: init-crash
+        capture:
+            field1: error
+
     - logline:
         provider: Microsoft.Windows.Subsystem.Lxss
         task: UserVisibleError
@@ -122,6 +132,16 @@ rules:
         capture:
           field8: error
 
+    - logline:
+        provider: Microsoft.Windows.Lxss.Manager
+        task: Error
+        field9: {contains: HcnCreateNetwork}
+      set:
+        name: hns-create-network-error
+        capture:
+          field9: error
+          field8: hresult
+
     - logline:
         provider: Microsoft.Windows.Lxss.Manager
       set: service-running
@@ -136,7 +156,7 @@ rules:
       
     - logline:
         provider: Microsoft.Windows.Subsystem.Lxss
-        task: UserVisibleError
+        task: UserVisible Error
         field3: {regex: '.*/ConfigureNetworking/HNS/.*'}
       set: 
         name: hns-fatal-error
@@ -205,7 +225,11 @@ actions:
         debug_message: 'Detected user visible error: $error'
         skip_similar_issues: false
 
-        
+    - when:
+        condition: 'init-crash'
+        debug_message: 'Found evidence of init crash: $error'
+        tag: init-crash
+
     - when:
         condition: 'kernel-panic'
         debug_message: 'Found evidence of kernel panic: $kmsg'
@@ -225,8 +249,18 @@ actions:
         user_message: 'The logs show that your Hyper-V firmware is expired. Please update your Windows build and see if that solves the issue'
         tag: needs-author-feedback
         skip_similar_issues: true
-
         
+    - when: 
+        condition:  'hns-create-network-error'
+        debug_message: 'Found evidence of HcnCreateNetwork failure: $error. HResult: $hresult'
+
+    - when:
+        condition:
+         and: ['vm-failed-to-start', 'hns-create-network-error']
+        user_message: "The logs show that the VM failed to start because the HNS network couldn't be created. Adding network tag"
+        tag: network
+        skip_similar_issues: true
+
     - when:
         condition:
           and: ['vm-failed-to-start', 'corrupted-initramfs']