tking2 / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
0 stars 1 forks source link

Add JSON output for volatility commands #289

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
No problem at all. Added the diff for this feature

First file adds the feature, second file is a example how the output will look 
like.

Original issue reported on code.google.com by thors.s...@googlemail.com on 5 Jul 2012 at 10:59

Attachments:

GoogleCodeExporter commented 9 years ago

Original comment by jamie.l...@gmail.com on 5 Jul 2012 at 4:02

GoogleCodeExporter commented 9 years ago
On special requests in the mailing lists some value names got changed 
("thread_" prefix removed). Instead I added a "object_type" value indicating 
that all the other values are thread-values.
Diff and example db added

Original comment by thors.s...@googlemail.com on 9 Jul 2012 at 7:20

Attachments:

GoogleCodeExporter commented 9 years ago
Just changing the name of this issue to be more general and merging in all the 
related issues. 

Original comment by michael.hale@gmail.com on 31 Aug 2012 at 11:43

GoogleCodeExporter commented 9 years ago
Issue 305 has been merged into this issue.

Original comment by michael.hale@gmail.com on 31 Aug 2012 at 11:43

GoogleCodeExporter commented 9 years ago
Issue 330 has been merged into this issue.

Original comment by michael.hale@gmail.com on 31 Aug 2012 at 11:43

GoogleCodeExporter commented 9 years ago
Issue 331 has been merged into this issue.

Original comment by michael.hale@gmail.com on 31 Aug 2012 at 11:44

GoogleCodeExporter commented 9 years ago
Issue 332 has been merged into this issue.

Original comment by michael.hale@gmail.com on 31 Aug 2012 at 11:44

GoogleCodeExporter commented 9 years ago
Issue 333 has been merged into this issue.

Original comment by michael.hale@gmail.com on 31 Aug 2012 at 11:44

GoogleCodeExporter commented 9 years ago
Issue 334 has been merged into this issue.

Original comment by michael.hale@gmail.com on 31 Aug 2012 at 11:44

GoogleCodeExporter commented 9 years ago
Issue 335 has been merged into this issue.

Original comment by michael.hale@gmail.com on 31 Aug 2012 at 11:45

GoogleCodeExporter commented 9 years ago
Issue 336 has been merged into this issue.

Original comment by michael.hale@gmail.com on 31 Aug 2012 at 11:45

GoogleCodeExporter commented 9 years ago
Issue 337 has been merged into this issue.

Original comment by michael.hale@gmail.com on 31 Aug 2012 at 11:45

GoogleCodeExporter commented 9 years ago
Issue 338 has been merged into this issue.

Original comment by michael.hale@gmail.com on 31 Aug 2012 at 11:45

GoogleCodeExporter commented 9 years ago
Issue 339 has been merged into this issue.

Original comment by michael.hale@gmail.com on 31 Aug 2012 at 11:46

GoogleCodeExporter commented 9 years ago
Additional Patches for the registry and malware commands.  I did not use the 
previous patches for apihooks/malfind.  I could not test the hashdump/lsadump 
commands, because I could not get the command to work.  All the other commands 
ran and rendered though.  I simply tested by running and "eyeballing" and 
comparing the output from the json to text.  I know this is not typically 
appropriate, but I dont have a unittest environment set up for the commands.

Original comment by adam.pri...@thecoverofnight.com on 1 Sep 2012 at 2:28

Attachments:

GoogleCodeExporter commented 9 years ago
Adding a few more patches.

Original comment by adam.pri...@thecoverofnight.com on 1 Sep 2012 at 2:29

Attachments:

GoogleCodeExporter commented 9 years ago
Hi guys, in a short while (around the 2.4 release date) we'll be supplying a 
command server which allows easy access to JSON output for all of the 
Volatility plugins. Thank you for your time and effort regarding this 
capability...and we'll be in touch when its out! 

Original comment by michael.hale@gmail.com on 7 Mar 2014 at 9:04

GoogleCodeExporter commented 9 years ago
This code does not seem to be part of the 2.4 release. Is json rendering 
implemented in 2.4?

Original comment by amemail1...@gmail.com on 12 Nov 2014 at 1:14

GoogleCodeExporter commented 9 years ago
No, but it is coming up in 2.5.  you can get json output for some plugins using 
the unified-stream-output branch on github: 
https://github.com/volatilityfoundation/volatility/tree/unified-stream-output

Original comment by jamie.l...@gmail.com on 12 Nov 2014 at 8:02

GoogleCodeExporter commented 9 years ago
Thanks for the quick reply. Played a little bit with it. Looks nice.

Original comment by amemail1...@gmail.com on 12 Nov 2014 at 8:54