https://github.com/osquery/osquery logo
#fleet
Title
# fleet
t

Tor Houghton

02/02/2022, 5:12 PM
By the way, exporting query results and attempting to import these into Numbers (Excel, too, perhaps?) result in column mismatches if you include information that contains the (default, unchangeable(?)) delimiter (","); e.g. if your query contains: ["sudo","/bin/sh","-c","whoami"] (json_cmdline) This import will fail because the delimiters aren't escaped, I suppose?
t

Tomas Touceda

02/02/2022, 8:48 PM
could it be that it should be in quotes with the inner quotes escaped so that Excel understands it's all one string?
2 Views