mirror of
https://github.com/mvt-project/mvt.git
synced 2026-07-18 18:37:25 +02:00
Merge refactor/structured-alerting into v2
Resolved conflicts: - pyproject.toml: Used v2 pinned dependency versions - Removed cmd_check_adb.py (deleted in refactor branch) - Updated all command files to include disable_version_check and disable_indicator_check flags - Adopted new AlertStore system from refactor branch - Updated version to 3.0.0 - Kept VirusTotal functionality commented out - Consolidated imports and module lists - Adopted refactor branch's simplified JSON loading - Updated iOS modules to use new alertstore approach
This commit is contained in:
@@ -9,7 +9,6 @@ from pathlib import Path
|
||||
from mvt.android.modules.bugreport.dumpsys_appops import DumpsysAppops
|
||||
from mvt.android.modules.bugreport.dumpsys_getprop import DumpsysGetProp
|
||||
from mvt.android.modules.bugreport.dumpsys_packages import DumpsysPackages
|
||||
from mvt.android.modules.bugreport.tombstones import Tombstones
|
||||
from mvt.common.module import run_module
|
||||
|
||||
from ..utils import get_artifact_folder
|
||||
@@ -36,9 +35,13 @@ class TestBugreportAnalysis:
|
||||
assert len(m.timeline) == 16
|
||||
|
||||
detected_by_ioc = [
|
||||
detected for detected in m.detected if detected.get("matched_indicator")
|
||||
detected
|
||||
for detected in m.alertstore.alerts
|
||||
if detected.event.get("matched_indicator")
|
||||
]
|
||||
assert len(m.detected) == 1 # Hueristic detection for suspicious permissions
|
||||
assert (
|
||||
len(m.alertstore.alerts) == 1
|
||||
) # Hueristic detection for suspicious permissions
|
||||
assert len(detected_by_ioc) == 0
|
||||
|
||||
def test_packages_module(self):
|
||||
|
||||
Reference in New Issue
Block a user