Zobber/ripgrep_suricata

Created April 6, 2020 15:41

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Select an option

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/Zobber/4dde67c2ac85be6ab8396051ad93a5f8.js"></script>
Save Zobber/4dde67c2ac85be6ab8396051ad93a5f8 to your computer and use it in GitHub Desktop.

Download ZIP

Raw

ripgrep_suricata

sudo rg -N --no-filename --type-add 'suri:eve.json' -tsuri 'application\\/octet-stream' --sort-files | jq 'select(.fileinfo and .http) | .' | colout '.*http_content.*' red | colout '.*filename.*' green | colout '.*magic.*' green

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment