CSV Files not generated correctly - Githubissues

WithSecureLabs / chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

GNU General Public License v3.0

2.85k stars 260 forks source link

CSV Files not generated correctly #35

Closed juaromu closed 2 years ago

juaromu commented 3 years ago

When \r present in columns, the CSV files generate additional lines and not formatted correctly:

system_time,id,detection_rules,computer_name,Event.EventData.TargetFilename,image 2021-10-26 05:58:04,11,"+ Suspicious xxxx File Created In TMP","""xxxx""",xxxx,xxxx 2021-10-26 06:55:36,11,"+ Suspicious xxxx File Created In TMP","""xxxx""",xxxx,xxxx

This is normally the case for the column "Detection Rules". Would it be possible to remove that \r or generate that column in a different way so that the CSVs will be created correctly?

alexkornitzer commented 3 years ago

Yeah this is on the list. The formatting done to present in the cli is not stripped on csv output. This is a bug.

juaromu commented 3 years ago

Thank you

alexkornitzer commented 2 years ago

I think I have fixed this in 2.0.0-alpha.1