Json output missing detections
56616c6f72 opened this issue · comments
Yo yo,
It's your boy, Mert.
Was just testing the json output. It looks like built-in detections do not get appended to the json output. Was this by design or a bug?
Json output:
Normal output:
Just checking in on this as I am experiencing the same issue. Stdout reports 71 detections, but JSON only contains 42. However, my JSON does contain some of the builtin detections, just not all of them. This may be resolved by the same bug fix, but just bringing it to your attention.
Any progress on a fix? Hoping to get this Velociraptor artifact patched ASAP as it relies on the incomplete JSON results at this time.
Due to the complexity of how builtins work and the required breaking changes to then expose this in the JSON. I am going to resolve this in the v2 work, but i cant give a timeframe for when i will have time to finish it off. Although i have done the bulk of the work already.
Right this is solved in v2.0.0-alpha.x so am closing this out. Feed back on the output format should be given in #77.