No CRLF added to output files (which is needed for parsing logfile) about pypykatz HOT 4 CLOSED

I do not see the reason why you want to parse the "logfiles" (assuming you mean the default text output), can you clarify?
I have added --json and --grep output options specifically for parsing the output programmatically. Is there a problem parsing those?

from pypykatz.

Edit: I didn't know about the --grep flag (It doesn't show up in -h either?) but this is nice! Thanks for the pointer.

TL;DR: Pypykatz output is a different syntax as Mimikatz (For instance NT: for pypykatz; * NTLM: for mimikatz) and therefor my regex fails for extracting needed parts (username, password, domain, NTLM hash).

I dug a little deeper and found it wasn't (only) because of the missing CRLF lines, but the output created by Pypykatz is different from Mimikatz.
Reason I do this is to automate the process as much as possible, by dropping a lsass memory dumpfile a cronjob will run which executes pypykatz (lsa minidump $inputfile -o $outfile).
After this a second part will execute, the parser, which extracts usernames with cleartext credentials in one file, and usernames with NTLM hashes in a second file. The cleartext credentials will be put in the dictionary file. The second file will be fed to Hashcat to be cracked.

from pypykatz.

The grep flag does show up in the help. pypykatz lsa -h
The normal text output was not meant for automatic parsing, JSON output is the one that has all the information in a structured manner -except for the kerberos tickets-, please use that.
pypykatz's output was never intended to mimic minikatz's output.

from pypykatz.

Thanks for your patience and explanations! Appreciate your time and effort!

from pypykatz.