I am sending the following data using a HTTP request:
{
"id": "a",
"jsonrpc": "2.0",
"method": "addJsonEvent",
"params": {
"common_fields": {
"source_hwid": "${HWID}",
"api_key": "${custid}"
},
"data": ["{ \"parent_process_path\": \"C:\\\\disk2\\\\process.exe\", \"command_line\": \"\\\"C:\\\\Windows\\\\Microsoft.NET\\\\Framework\\\\v4.0.30319\\\\ngen.exe\\\" uninstall \\\"C:\\\\Windows\\\\assembly\\\\NativeImages_v4.0.30319_32\\\\Microsoft.W2d29a719#\\\\fdb201638092fc8d1310350e099eba45\\\\Microsoft.Windows.DSC.CoreConfProviders.ni.dll\\\" /noroot /LegacyServiceBehavior\", \"api_key\": \"${custid}\" }"]
}}
Looking at the View Results Tree
I see that the data sent is the following:
{
"id": "a",
"jsonrpc": "2.0",
"method": "addJsonEvent",
"params": {
"common_fields": {
"source_hwid": "560ade69-808e-18a4-7d2a-123-123456000001",
"api_key": "5a9fb2311da1972e6c8b4567"
},
"data": ["{ \"parent_process_path\": \"C:\\disk2\\process.exe\", \"command_line\": \"\\"C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\ngen.exe\\" uninstall \\"C:\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.W2d29a719#\\fdb201638092fc8d1310350e099eba45\\Microsoft.Windows.DSC.CoreConfProviders.ni.dll\\" /noroot /LegacyServiceBehavior\", \"api_key\": \"5a9fb2311da1972e6c8b4567\" }"]
}}
The actual data sent is no longer a valid JSON.
Is there any way to sent the data as is, without escaping those characters ?