BitsParser icon indicating copy to clipboard operation
BitsParser copied to clipboard

Processing Json output

Open agibbons27 opened this issue 3 years ago • 0 comments

The current json output is not formatted to allow for easy processing of BitsParser output in additional tools. There is a small change that can make the output easier to process.

https://github.com/fireeye/BitsParser/blob/master/BitsParser.py#L341

Current output code:

# Output unique jobs
if job.hash not in self.visited_jobs:
    formatted_job = json.dumps(job.job_dict, indent=4)
    print(formatted_job)

Potential change:

# Output unique jobs
if job.hash not in self.visited_jobs:
    json.dump(job.job_dict, sys.stdout)
    print()

The print() call is needed to ensure each result in the output file is on a separate line.

Maybe an option could be added to specify output type.

agibbons27 avatar Mar 03 '22 21:03 agibbons27