Commands | crul

📄️ addcolumn

Adds a new column using the provided column name with each row containing the provided value.

📄️ append

Appends the provided string to each result of the provided column

📄️ auth

Authenticate with a supported provider (okta|splunk|basic). The returned

📄️ average

Returns the average value for the provided column

📄️ branch

Starts a new branch, all stages following the branch command will be run on the root of the first branch, until another branch command or a mergebranches command.

📄️ contains

Filter columns containing the provided string

📄️ copy

Copies the content of one column to another column

📄️ countOf

Counts instances of a value for the provided column

📄️ devices

Devices and associated viewport properties that can be emulated.

Diffs the incoming results against a previously frozen set of results in the cellar. This command can use flags to control overwriting the cellar comparison file to include new entries, and/or remove old entries.

📄️ echo

Echos back input.

📄️ endswith

Filter columns ending with the provided string

📄️ excludes

Excludes rows containing the provided string in the provided column

📄️ extract

Extracts keys and values from the provided column containing stringified JSON

📄️ fail

Just fails.

📄️ fillEmpty

Fills empty column values

📄️ filter

Filters results based on the provided expression

📄️ find

Finds any of the provided strings

📄️ fnmatch

Find a string in provided column using a provided fnmatch pattern

📄️ form

Populate a form based on selector/value pairs and invoke a click

📄️ freeze

Freezes results for retrieval using the thaw command

📄️ groupBy

Groups rows based on the provided column

📄️ hash

Hashes the provided columns

📄️ head

Returns the top [count] results from subsequent results.

📄️ html

Extract the matching html elements from the provided column. Defaults to a selector '*'.

📄️ identify

Identifies matching known patterns (Credit Card Numbers, Social Security Numbers, Crypto Addresses, Email Addresses, Phone Numbers). Can optionally provide columns to only check provided columns rather than scanning the entire row.

📄️ join

Joins rows from a previously labeled based on the provided column

📄️ keyContains

Useful for working with nested data sets with unique key values. Returns the value of a key matching the provided regex. Additional keys from that level can be provided. For example: keyContains "body$" id would return any key matching the "body$" regex (ex. data.nested.body, data.nested.nested.body), as well as the key id at that level (ex. data.nested.id, data.nested.nested.id).

📄️ loadquery

Loads a set of results from a completed query into a new query

📄️ logs

Returns system and (non query) worker logs.

📄️ lowercase

Transforms the provided columns to lowercase strings

📄️ math

Runs the mathematical expression provided (equal sign must be on the left)

📄️ max

Find the max value of a column

📄️ merge

Merges rows based on the provided column

📄️ mergebranches

Ends a branching operation by merging all previous branches into a single results set.

📄️ mergecolumn

Merges all values in the provided column from all rows, split by the provided delimiter

📄️ min

Returns the minimum value for the provided column

📄️ navigate

Capture Cookie, localStorage and sessionStorage from page navigate lifecyle (load page, do something, load new page).

📄️ normalize

Extracts keys and values from the provided column containing stringified JSON (if no column is provided, the row is considered to be an array)

📄️ oauth

flags:

📄️ open

Opens a url and returns the page contents

📄️ parseTimestamp

Parses the provided timestamp containing column into a date.

📄️ prepend

Prepends the provided string to each result of the provided column

📄️ range

Creates a column (named "name") of values from "start" to "end"

📄️ regex

Find a regex pattern in provided results

📄️ rename

Renames a column

📄️ replace

Replaces the "replaced" string with the "replacer" string in each result of the provided column

📄️ requests

A summary of all external requests made from a url. NOTE: This is a slower operation as all requests are processed.

📄️ scan

Runs a vulnerability scan on the contents of a column containing JavaScript.

📄️ scrape

The general swiss-army knife for execution of arbitrary JavaScript in an <html> document.

📄️ screenshot

Take a screenshot of a specified element from an <html> document.

📄️ seed

Seeds following commands with user submitted data

📄️ sleep

Just sleeps.

📄️ slice

Returns the column value from the provided starting index to the provided ending index.

📄️ sort

Sorts values in provided column

📄️ split

Splits column by delimiter into values

📄️ startswith

Filter columns starting with the provided string

📄️ sum

Sums up all the row values of one or more columns

📄️ table

Tabluates data to a csv format for the provided fields

📄️ tag

Tags results based on the provided expression, rows matching the expression will be tagged with the provided value in the provided column

📄️ template

Adds a new column using the provided column name with each row containing the provided template with any tokenized values substituted.

📄️ thaw

Thaws a set of previously frozen results into the query pipeline

📄️ timestamp

Adds a timestamp value to each result

📄️ tonumber

Converts each column value to a number

📄️ top

System health and active workers including error reporting.

📄️ tostring

Converts each column value to a string

📄️ unique

Removes rows containing duplicate values for provided columns

📄️ urldecode

URL decodes each column value. See MDN decodeURIComponent for specification.

📄️ urlencode

URL encodes each column value. See MDN encodeURIComponent for specification.

📄️ verify

Verifies that a column is properly signed