# jq
# Command-line JSON processor for extracting and transforming structured data
# FOR610 Labs: 1.4 | Sections: 1

% json, data-processing

# Basic usage
cat report.json | jq '.apis'

# Recursive/follow references
jq -r '.entry' report.json


# --- Recipes (multi-tool chains) ---

# >> Emulate Malware and Extract API Calls
# Emulate and capture both JSON report and text log
speakeasy -t <sample> -o report.json 2> report.txt
# Extract all API names called
jq '.entry_points[].apis[].api_name' report.json
# Extract unique API names
jq -r '.entry_points[].apis[].api_name' report.json | sort -u