CalvinBackup/mvt
1
0
Fork 0
mirror of https://github.com/mvt-project/mvt.git synced 2026-02-13 00:52:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

Checking for manipulated entries even when no indicators are provided

Browse Source
This commit is contained in:
Nex
2021-08-12 12:57:27 +02:00
parent 257f3732e3
commit 0a7512cfb2
1 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
mvt/ios/modules/fs/net_base.py
View File

@@ -203,6 +203,15 @@ class NetBase(IOSExtraction):
self.results = sorted(self.results, key=operator.itemgetter("first_isodate"))
def check_indicators(self):
# Check for manipulated process records.
# TODO: Catching KeyError for live_isodate for retro-compatibility.
# This is not very good.
try:
self.check_manipulated()
self.find_deleted()
except KeyError:
pass
if not self.indicators:
return
@@ -218,12 +227,3 @@ class NetBase(IOSExtraction):
if self.indicators.check_process(proc_name):
self.detected.append(result)
# Check for manipulated process records.
# TODO: Catching KeyError for live_isodate for retro-compatibility.
# This is not very good.
try:
self.check_manipulated()
self.find_deleted()
except KeyError:
pass