Ttyjfyk

What is Arya's weapon design?

Identify plant with long narrow paired leaves and reddish stems

Why do we bend a book to keep it straight?

Is it fair for a professor to grade us on the possession of past papers?

Is it ethical to give a final exam after the professor has quit before teaching the remaining chapters of the course?

At the end of Thor: Ragnarok why don't the Asgardians turn and head for the Bifrost as per their original plan?

Do I really need recursive chmod to restrict access to a folder?

How to find out what spells would be useless to a blind NPC spellcaster?

Seeking colloquialism for “just because”

Identifying polygons that intersect with another layer using QGIS?

How do pianists reach extremely loud dynamics?

In predicate logic, does existential quantification (∃) include universal quantification (∀), i.e. can 'some' imply 'all'?

How does the particle を relate to the verb 行く in the structure「A を + B に行く」?

Why are Kinder Surprise Eggs illegal in the USA?

Sci-Fi book where patients in a coma ward all live in a subconscious world linked together

What's the meaning of 間時肆拾貳 at a car parking sign

3 doors, three guards, one stone

How to tell that you are a giant?

List of Python versions

Resolving to minmaj7

Single word antonym of "flightless"

What would be the ideal power source for a cybernetic eye?

Check which numbers satisfy the condition [A*B*C = A! + B! + C!]

Short Story with Cinderella as a Voo-doo Witch

Parsing “mdls” output

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;

0

The following script takes a user input (path to a mounted macOS volume such as /Volumes/Macintosh HD/)

#!/bin/bash
# Author: Swasti Bhushan Deb
# macOS 10.13.3
# kMDItemWhereFroms.sh

read -e -p "Enter the full path to the Mounted Volume (e.g /Volume /Macintosh HD): " path
 var=$(mdfind -name 'kMDItemWhereFroms="*"' -onlyin "$path")
 echo "$var" 

Output:

/Users/swastibhushandeb/Documents/encase_examiner_v710_release_notes.pdf
/Users/swastibhushandeb/Desktop/AirPrint Forensics.pdf

As a next step I would like the script to perform mdls (prints the values of all the metadata attributes associated with the files) on each output from kMDItemWhereFroms.sh,which can also be perfromed manually by:

 mdls /Users/swastibhushandeb/Documents/encase_examiner_v710_release_notes.pdf

However if such processing is to be automated,what are the available bash coding strategies/options available?How can the output be directed to a csv file so that each column contains fields from mdls command output?

bash shell command-line osx

share|improve this question

asked 10 hours ago

swasti bhushan debswasti bhushan deb

226

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Are you sure about the CSV part? What do you want to do with the content of the CSV afterwards?
  
  – nohillside
  10 hours ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @ nohillside ,the idea is to generate a ccv file which contains all the macOS extended attribute names and corresponding value.Hoever thiscan be optional :)
  
  – swasti bhushan deb
  10 hours ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  The first part (running mdls on the result of mdfind) is easy, see answer below. Turning that into a CSV is much harder, that's why it might help to know what you intend to do with the CSV afterwards (as there may be other ways to accomplish this).
  
  – nohillside
  9 hours ago
  

  
  
  
  

add a comment | 

0

The following script takes a user input (path to a mounted macOS volume such as /Volumes/Macintosh HD/)

#!/bin/bash
# Author: Swasti Bhushan Deb
# macOS 10.13.3
# kMDItemWhereFroms.sh

read -e -p "Enter the full path to the Mounted Volume (e.g /Volume /Macintosh HD): " path
 var=$(mdfind -name 'kMDItemWhereFroms="*"' -onlyin "$path")
 echo "$var" 

Output:

/Users/swastibhushandeb/Documents/encase_examiner_v710_release_notes.pdf
/Users/swastibhushandeb/Desktop/AirPrint Forensics.pdf

As a next step I would like the script to perform mdls (prints the values of all the metadata attributes associated with the files) on each output from kMDItemWhereFroms.sh,which can also be perfromed manually by:

 mdls /Users/swastibhushandeb/Documents/encase_examiner_v710_release_notes.pdf

However if such processing is to be automated,what are the available bash coding strategies/options available?How can the output be directed to a csv file so that each column contains fields from mdls command output?

bash shell command-line osx

share|improve this question

asked 10 hours ago

swasti bhushan debswasti bhushan deb

226

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Are you sure about the CSV part? What do you want to do with the content of the CSV afterwards?
  
  – nohillside
  10 hours ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @ nohillside ,the idea is to generate a ccv file which contains all the macOS extended attribute names and corresponding value.Hoever thiscan be optional :)
  
  – swasti bhushan deb
  10 hours ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  The first part (running mdls on the result of mdfind) is easy, see answer below. Turning that into a CSV is much harder, that's why it might help to know what you intend to do with the CSV afterwards (as there may be other ways to accomplish this).
  
  – nohillside
  9 hours ago
  

  
  
  
  

add a comment | 

The following script takes a user input (path to a mounted macOS volume such as /Volumes/Macintosh HD/)

#!/bin/bash
# Author: Swasti Bhushan Deb
# macOS 10.13.3
# kMDItemWhereFroms.sh

read -e -p "Enter the full path to the Mounted Volume (e.g /Volume /Macintosh HD): " path
 var=$(mdfind -name 'kMDItemWhereFroms="*"' -onlyin "$path")
 echo "$var" 

Output:

/Users/swastibhushandeb/Documents/encase_examiner_v710_release_notes.pdf
/Users/swastibhushandeb/Desktop/AirPrint Forensics.pdf

As a next step I would like the script to perform mdls (prints the values of all the metadata attributes associated with the files) on each output from kMDItemWhereFroms.sh,which can also be perfromed manually by:

 mdls /Users/swastibhushandeb/Documents/encase_examiner_v710_release_notes.pdf

However if such processing is to be automated,what are the available bash coding strategies/options available?How can the output be directed to a csv file so that each column contains fields from mdls command output?

bash shell command-line osx

share|improve this question

asked 10 hours ago

swasti bhushan debswasti bhushan deb

226

#!/bin/bash
# Author: Swasti Bhushan Deb
# macOS 10.13.3
# kMDItemWhereFroms.sh

read -e -p "Enter the full path to the Mounted Volume (e.g /Volume /Macintosh HD): " path
 var=$(mdfind -name 'kMDItemWhereFroms="*"' -onlyin "$path")
 echo "$var" 

/Users/swastibhushandeb/Documents/encase_examiner_v710_release_notes.pdf
/Users/swastibhushandeb/Desktop/AirPrint Forensics.pdf

 mdls /Users/swastibhushandeb/Documents/encase_examiner_v710_release_notes.pdf

share|improve this question

asked 10 hours ago

swasti bhushan debswasti bhushan deb

226

share|improve this question

asked 10 hours ago

swasti bhushan debswasti bhushan deb

226

asked 10 hours ago

swasti bhushan debswasti bhushan deb

226

asked 10 hours ago

swasti bhushan debswasti bhushan deb

226

1 Answer
1

active

oldest

votes

0

You can make use of mdfind's -0 option together with xargs to have the names found terminated by a NUL character (and therefore not having to worry about space/tab/newlines etc).

read -e -p 'Path? ' path
mdfind -0 -name 'kMDItemWhereFroms="*"' -onlyin "$path" | xargs -0 mdls

If you want to see the path/file names as well (and not only the output of mdls) it becomes a bit more elaborate:

mdfind -0 -name 'kMDItemWhereFroms="*"' -onlyin "$path" | 
 xargs -0 -n 1 sh -c 'echo "$1" && mdls "$1"' _

share|improve this answer

edited 10 hours ago

answered 10 hours ago

nohillsidenohillside

2,4101120

add a comment | 

Your Answer

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f512811%2fparsing-mdls-output%23new-answer', 'question_page');

);

Post as a guest

Name

Email

Required, but never shown

0

You can make use of mdfind's -0 option together with xargs to have the names found terminated by a NUL character (and therefore not having to worry about space/tab/newlines etc).

read -e -p 'Path? ' path
mdfind -0 -name 'kMDItemWhereFroms="*"' -onlyin "$path" | xargs -0 mdls

If you want to see the path/file names as well (and not only the output of mdls) it becomes a bit more elaborate:

mdfind -0 -name 'kMDItemWhereFroms="*"' -onlyin "$path" | 
 xargs -0 -n 1 sh -c 'echo "$1" && mdls "$1"' _

share|improve this answer

edited 10 hours ago

answered 10 hours ago

nohillsidenohillside

2,4101120

add a comment | 

0

You can make use of mdfind's -0 option together with xargs to have the names found terminated by a NUL character (and therefore not having to worry about space/tab/newlines etc).

read -e -p 'Path? ' path
mdfind -0 -name 'kMDItemWhereFroms="*"' -onlyin "$path" | xargs -0 mdls

If you want to see the path/file names as well (and not only the output of mdls) it becomes a bit more elaborate:

mdfind -0 -name 'kMDItemWhereFroms="*"' -onlyin "$path" | 
 xargs -0 -n 1 sh -c 'echo "$1" && mdls "$1"' _

share|improve this answer

edited 10 hours ago

answered 10 hours ago

nohillsidenohillside

2,4101120

add a comment | 

You can make use of mdfind's -0 option together with xargs to have the names found terminated by a NUL character (and therefore not having to worry about space/tab/newlines etc).

read -e -p 'Path? ' path
mdfind -0 -name 'kMDItemWhereFroms="*"' -onlyin "$path" | xargs -0 mdls

If you want to see the path/file names as well (and not only the output of mdls) it becomes a bit more elaborate:

mdfind -0 -name 'kMDItemWhereFroms="*"' -onlyin "$path" | 
 xargs -0 -n 1 sh -c 'echo "$1" && mdls "$1"' _

share|improve this answer

edited 10 hours ago

answered 10 hours ago

nohillsidenohillside

2,4101120

read -e -p 'Path? ' path
mdfind -0 -name 'kMDItemWhereFroms="*"' -onlyin "$path" | xargs -0 mdls

mdfind -0 -name 'kMDItemWhereFroms="*"' -onlyin "$path" | 
 xargs -0 -n 1 sh -c 'echo "$1" && mdls "$1"' _

share|improve this answer

edited 10 hours ago

answered 10 hours ago

nohillsidenohillside

2,4101120

answered 10 hours ago

nohillsidenohillside

2,4101120

answered 10 hours ago

nohillsidenohillside

2,4101120