From 0a7512cfb2fa3dc10440b408c31ce7ac575730f2 Mon Sep 17 00:00:00 2001 From: Nex Date: Thu, 12 Aug 2021 12:57:27 +0200 Subject: [PATCH] Checking for manipulated entries even when no indicators are provided --- mvt/ios/modules/fs/net_base.py | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/mvt/ios/modules/fs/net_base.py b/mvt/ios/modules/fs/net_base.py index e1ab93b..a6f7688 100644 --- a/mvt/ios/modules/fs/net_base.py +++ b/mvt/ios/modules/fs/net_base.py @@ -203,6 +203,15 @@ class NetBase(IOSExtraction): self.results = sorted(self.results, key=operator.itemgetter("first_isodate")) def check_indicators(self): + # Check for manipulated process records. + # TODO: Catching KeyError for live_isodate for retro-compatibility. + # This is not very good. + try: + self.check_manipulated() + self.find_deleted() + except KeyError: + pass + if not self.indicators: return @@ -218,12 +227,3 @@ class NetBase(IOSExtraction): if self.indicators.check_process(proc_name): self.detected.append(result) - - # Check for manipulated process records. - # TODO: Catching KeyError for live_isodate for retro-compatibility. - # This is not very good. - try: - self.check_manipulated() - self.find_deleted() - except KeyError: - pass