jq is super useful, once somebody explains the basics to you.

[hal_pomeranz@infosec.exchange]

jq is super useful, once somebody explains the basics to you. Here I am explaining the basics in a way that's applicable for all you DFIR types.

jq For Forensics

jq is a great tool for parsing JSON data. But DFIR professionals often apply jq differently from the typical examples you see written for developers.

Righteous IT (righteousit.com)

#JSON #DFIR #Linux