Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[bug] JSONL Output doesn't always contain a JSON object in the Details key #1386

Closed
xathon opened this issue Jul 16, 2024 · 0 comments · Fixed by #1390
Closed

[bug] JSONL Output doesn't always contain a JSON object in the Details key #1386

xathon opened this issue Jul 16, 2024 · 0 comments · Fixed by #1390
Assignees
Labels
invalid This doesn't seem right
Milestone

Comments

@xathon
Copy link

xathon commented Jul 16, 2024

Describe the bug
The JSONL Output doesn't always contain a JSON object in the Details key. If it's empty, it will contain the string "-". This makes it hard to parse the output with tools that expect a JSON there.

Step to Reproduce
Run Hayabusa like this: hayabusa-2.16.0-lin-gnu json-timeline -d '/image/Windows/System32/winevt/Logs/' -L -o '/tmp/hayabusa-test.jsonl' and look at the output

Expected behavior
Events that don't generate any details should have a Details key with the value { }.

Screenshots
image
(taken from an older version of Hayabusa, but the problem stands)

Environment:

  • OS: Linux
  • hayabusa version: 2.16.0

Additional context

@xathon xathon added the bug Something isn't working label Jul 16, 2024
@hitenkoku hitenkoku self-assigned this Jul 17, 2024
@YamatoSecurity YamatoSecurity added this to the v2.17.0 milestone Jul 19, 2024
@hitenkoku hitenkoku added invalid This doesn't seem right and removed bug Something isn't working labels Jul 25, 2024
hitenkoku added a commit that referenced this issue Aug 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
invalid This doesn't seem right
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants