File Finder Glob Table

28 views
Skip to first unread message

Carlos Cajigas

unread,
Sep 15, 2024, 3:37:11 PM9/15/24
to velociraptor-discuss
I need to use FileFinder to search for 50 specific files.  
I would like to copy and paste all 50 filenames in the glob table, but my testing is failing.
Here is an example of what I tried among many different things.  
Can someone send me an example of how to paste multiple filenames in the artifact to search for them.  The below is not working for me.  Thanks

image.png

Carlos Cajigas 
MSc
CTO Covert Bit

Mike Cohen

unread,
Sep 15, 2024, 8:48:19 PM9/15/24
to Carlos Cajigas, velociraptor-discuss
Hi Carlos,
   The parameter SearchFilesGlobTable is defined as a CSV type which means it is really a CSV of globs. 

When you first open the parameters for the artifact you get a UI that allows you to add rows, and shows you the headers etc

image.png

But if you click the little pen icon it switches to just a text input where you are supposed to put in the CSV file

image.png


This makes it easier to paste a large number of globs one per line (you can also just copy from another txt file or somewhere else and reuse the same set of globs in the future).

You can press the little pen icon again to parse the data as a csv and switch to the other view again. This will validate the CSV as well

Thanks
Mike


Mike Cohen 
Digital Paleontologist, 
Velocidex Enterprises
mi...@velocidex.com 


--
You received this message because you are subscribed to the Google Groups "velociraptor-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to velociraptor-dis...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/velociraptor-discuss/CAF2S4xOuEKkQG8om4_8AuKmBHNMJYK%2Bw_U-XaC_kWZH1NOXVfw%40mail.gmail.com.

Carlos Cajigas

unread,
Sep 15, 2024, 9:12:38 PM9/15/24
to Mike Cohen, velociraptor-discuss
Mike,
That helped.  I got it now!  
Thanks so much!
Carlos
--
Reply all
Reply to author
Forward
0 new messages