osxcollector related files filter output

civ_crack_with_virus.txt

vagrant@osxcollector:~/osxcollector_output_filters$ python -m osxcollector.output_filters.related_files -i ../osxcollect-2016_04_05-15_13_25/osxcollect-2016_04_05-15_13_25.json -f '/Users/XXXXXXX/Downloads/Sid.Meiers.Civilization.V.Brav.dmg' | jq 'select(has("osxcollector_related")) | select(.osxcollector_related | keys[] | contains("files"))'
{
  "sha2": "8b83c8167cfcd88aad8512935bac48fdb5d2b4f75b50b7815b11507af17cf1cf",
  "sha1": "b8d83b3c30edaf80b1d4e13d76aca617c666d6c1",
  "extra_data_check": "",
  "ctime": "2016-03-23 10:03:18",
  "xattr-quarantines": [
    "0001;56f2b036;Google Chrome;A68AB9B8-5686-419A-A967-AA163B538AEA"
  ],
  "osxcollector_section": "downloads",
  "extra_data_found": false,
  "signature_chain": [],
  "xattr-wherefrom": [
    "http://nl.trustedpackagesmac.com/static/get-pkg?dc_id=DP2016&search_id=WT&click_id=id___63611a33-0197-439d-b3dd-73472a258d47&product_name=Sid.Meiers.Civilization.V.Brav&to=2001.0.X.1",
    "http://trustedpackagesmac.com/mac/i-g-i?lp=1&lang=&fln=Sid.Meiers.Civilization.V.Brave.New.World-RELOADED"
  ],
  "osxcollector_related": {
    "files": [
      "sid.meiers.civilization.v.brav.dmg"
    ]
  },
  "mtime": "2016-03-23 10:03:17",
  "osxcollector_incident_id": "osxcollect-2016_04_05-15_13_25",
  "osxcollector_username": "XXXXXXX",
  "file_path": "/Users/XXXXXXX/Downloads/Sid.Meiers.Civilization.V.Brav.dmg",
  "osxcollector_subsection": "downloads",
  "md5": "3a7f797bf8c3bd0171acca2da5d49e1e"
}
{
  "osxcollector_incident_id": "osxcollect-2016_04_05-15_13_25",
  "total_bytes": 3514381,
  "interrupt_reason": 0,
  "id": 5,
  "opened": 1,
  "state": 1,
  "etag": "",
  "received_bytes": 3514381,
  "mime_type": "application/x-apple-diskimage",
  "osxcollector_related": {
    "files": [
      "sid.meiers.civilization.v.brav.dmg"
    ]
  },
  "by_ext_id": "",
  "start_time": "2016-03-23 10:03:15",
  "last_modified": "",
  "by_ext_name": "",
  "osxcollector_db_path": "/Users/XXXXXXX/Library/Application Support/Google/Chrome/Default/History",
  "osxcollector_subsection": "history",
  "danger_type": 4,
  "osxcollector_username": "XXXXXXX",
  "original_mime_type": "application/x-apple-diskimage",
  "referrer": "http://trustedpackagesmac.com/mac/i-g-i?lp=1&lang=&fln=Sid.Meiers.Civilization.V.Brave.New.World-RELOADED",
  "current_path": "/Users/XXXXXXX/Downloads/Sid.Meiers.Civilization.V.Brav.dmg",
  "target_path": "/Users/XXXXXXX/Downloads/Sid.Meiers.Civilization.V.Brav.dmg",
  "end_time": "2016-03-23 10:03:18",
  "osxcollector_table_name": "downloads",
  "osxcollector_section": "chrome"
}