search

redcanaryco / surveyor

A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.
MIT License
169 stars 59 forks source link

Add json output #120

Open xC0uNt3r7hr34t opened 1 year ago

xC0uNt3r7hr34t commented 1 year ago

Add the global option to output results as a json file instead of csv.

Changes applied to surveyor.py and each of the product files. SentinelOne has been tested and validated to work, I do not have access to test other EDRs. I am also a bit unsure as to how to still categorize outputs with the appropriate tags.

Resolves #90

rc-abodkins commented 1 year ago

Currently this feature would only work for S1. Before rolling this out we would want this feature parity across all supported EDR products.

xC0uNt3r7hr34t commented 1 year ago

changes were added for all product files, however I do not have the capability to test each edr due to access limitations.