[Feature Request] Lowercase keys in JSON Output about evtx

[omerbenamram]

Hi,

The purpose of the cli tool is to parse event logs as close to the source as possible.
I suggest you combine this with an additional tool such as jq, or write a simple python script.

What you've ask for can be done with a one-liner in jq.
cargo run --release .\samples\security.evtx -o jsonl | jq -r 'walk(if type == "object" then with_entries(.key|=ascii_downcase) else . end)'

Results in output like:

[andurin]

Makes absolutely sense - thanks for the jq magic. (I really should spent more time with jq.)