Mastodawn

jq is super useful, once somebody explains the basics to you. Here I am explaining the basics in a way that's applicable for all you DFIR types.

jq is a great tool for parsing JSON data. But DFIR professionals often apply jq differently from the typical examples you see written for developers.

Righteous IT

@hal_pomeranz jq is my boyfriend

@0x00string jq is in my "parsing hall of fame" along with awk and tshark.

@hal_pomeranz @0x00string tried fq? i know some ppl have used it for forensic related things

@wader @hal_pomeranz @0x00string could I ask for a link? I'm failing to find it.
Edit: "fq jq" finds https://github.com/wader/fq