mirror of
https://github.com/mvt-project/mvt.git
synced 2026-08-28 05:40:25 +02:00
Renamed package to package_name for consistency
This commit is contained in:
@@ -21,7 +21,7 @@ class DumpsysAccessibility(AndroidExtraction):
|
|||||||
|
|
||||||
def check_indicators(self):
|
def check_indicators(self):
|
||||||
for result in self.results:
|
for result in self.results:
|
||||||
ioc = self.indicators.check_app_id(result["package"])
|
ioc = self.indicators.check_app_id(result["package_name"])
|
||||||
if ioc:
|
if ioc:
|
||||||
result["matched_indicator"] = ioc
|
result["matched_indicator"] = ioc
|
||||||
self.detected.append(result)
|
self.detected.append(result)
|
||||||
@@ -47,7 +47,7 @@ class DumpsysAccessibility(AndroidExtraction):
|
|||||||
log.info("Found installed accessibility service \"%s\"", service)
|
log.info("Found installed accessibility service \"%s\"", service)
|
||||||
|
|
||||||
results.append({
|
results.append({
|
||||||
"package": service.split("/")[0],
|
"package_name": service.split("/")[0],
|
||||||
"service": service,
|
"service": service,
|
||||||
})
|
})
|
||||||
|
|
||||||
|
|||||||
@@ -24,7 +24,7 @@ class DumpsysActivities(AndroidExtraction):
|
|||||||
def check_indicators(self):
|
def check_indicators(self):
|
||||||
for intent, activities in self.results.items():
|
for intent, activities in self.results.items():
|
||||||
for activity in activities:
|
for activity in activities:
|
||||||
ioc = self.indicators.check_app_id(activity["package"])
|
ioc = self.indicators.check_app_id(activity["package_name"])
|
||||||
if ioc:
|
if ioc:
|
||||||
activity["matched_indicator"] = ioc
|
activity["matched_indicator"] = ioc
|
||||||
self.detected.append({intent: activity})
|
self.detected.append({intent: activity})
|
||||||
@@ -77,10 +77,10 @@ class DumpsysActivities(AndroidExtraction):
|
|||||||
# If we got this far, we are processing receivers for the
|
# If we got this far, we are processing receivers for the
|
||||||
# activities we are interested in.
|
# activities we are interested in.
|
||||||
activity = line.strip().split(" ")[1]
|
activity = line.strip().split(" ")[1]
|
||||||
package = activity.split("/")[0]
|
package_name = activity.split("/")[0]
|
||||||
|
|
||||||
results[intent].append({
|
results[intent].append({
|
||||||
"package": package,
|
"package_name": package_name,
|
||||||
"activity": activity,
|
"activity": activity,
|
||||||
})
|
})
|
||||||
|
|
||||||
|
|||||||
@@ -24,12 +24,12 @@ class DumpsysBatteryDaily(AndroidExtraction):
|
|||||||
"timestamp": record["from"],
|
"timestamp": record["from"],
|
||||||
"module": self.__class__.__name__,
|
"module": self.__class__.__name__,
|
||||||
"event": "battery_daily",
|
"event": "battery_daily",
|
||||||
"data": f"Recorded update of package {record['package']} with vers {record['vers']}"
|
"data": f"Recorded update of package {record['package_name']} with vers {record['vers']}"
|
||||||
}
|
}
|
||||||
|
|
||||||
def check_indicators(self):
|
def check_indicators(self):
|
||||||
for result in self.results:
|
for result in self.results:
|
||||||
ioc = self.indicators.check_app_id(result["package"])
|
ioc = self.indicators.check_app_id(result["package_name"])
|
||||||
if ioc:
|
if ioc:
|
||||||
result["matched_indicator"] = ioc
|
result["matched_indicator"] = ioc
|
||||||
self.detected.append(result)
|
self.detected.append(result)
|
||||||
@@ -59,12 +59,12 @@ class DumpsysBatteryDaily(AndroidExtraction):
|
|||||||
continue
|
continue
|
||||||
|
|
||||||
line = line.strip().replace("Update ", "")
|
line = line.strip().replace("Update ", "")
|
||||||
package, vers = line.split(" ", 1)
|
package_name, vers = line.split(" ", 1)
|
||||||
vers_nr = vers.split("=", 1)[1]
|
vers_nr = vers.split("=", 1)[1]
|
||||||
|
|
||||||
already_seen = False
|
already_seen = False
|
||||||
for update in daily_updates:
|
for update in daily_updates:
|
||||||
if package == update["package"] and vers_nr == update["vers"]:
|
if package_name == update["package_name"] and vers_nr == update["vers"]:
|
||||||
already_seen = True
|
already_seen = True
|
||||||
break
|
break
|
||||||
|
|
||||||
@@ -73,7 +73,7 @@ class DumpsysBatteryDaily(AndroidExtraction):
|
|||||||
"action": "update",
|
"action": "update",
|
||||||
"from": daily["from"],
|
"from": daily["from"],
|
||||||
"to": daily["to"],
|
"to": daily["to"],
|
||||||
"package": package,
|
"package_name": package_name,
|
||||||
"vers": vers_nr,
|
"vers": vers_nr,
|
||||||
})
|
})
|
||||||
|
|
||||||
|
|||||||
@@ -21,7 +21,7 @@ class DumpsysBatteryHistory(AndroidExtraction):
|
|||||||
|
|
||||||
def check_indicators(self):
|
def check_indicators(self):
|
||||||
for result in self.results:
|
for result in self.results:
|
||||||
ioc = self.indicators.check_app_id(result["package"])
|
ioc = self.indicators.check_app_id(result["package_name"])
|
||||||
if ioc:
|
if ioc:
|
||||||
result["matched_indicator"] = ioc
|
result["matched_indicator"] = ioc
|
||||||
self.detected.append(result)
|
self.detected.append(result)
|
||||||
@@ -56,14 +56,14 @@ class DumpsysBatteryHistory(AndroidExtraction):
|
|||||||
if event in ["start_job", "end_job"]:
|
if event in ["start_job", "end_job"]:
|
||||||
uid = line[line.find("=")+1:line.find(":")]
|
uid = line[line.find("=")+1:line.find(":")]
|
||||||
service = line[line.find(":")+1:].strip('"')
|
service = line[line.find(":")+1:].strip('"')
|
||||||
package = service.split("/")[0]
|
package_name = service.split("/")[0]
|
||||||
elif event == "wake":
|
elif event == "wake":
|
||||||
uid = line[line.find("=")+1:line.find(":")]
|
uid = line[line.find("=")+1:line.find(":")]
|
||||||
service = line[line.find("*walarm*:")+9:].split(" ")[0].strip('"').strip()
|
service = line[line.find("*walarm*:")+9:].split(" ")[0].strip('"').strip()
|
||||||
if service == "" or "/" not in service:
|
if service == "" or "/" not in service:
|
||||||
continue
|
continue
|
||||||
|
|
||||||
package = service.split("/")[0]
|
package_name = service.split("/")[0]
|
||||||
else:
|
else:
|
||||||
continue
|
continue
|
||||||
|
|
||||||
@@ -71,7 +71,7 @@ class DumpsysBatteryHistory(AndroidExtraction):
|
|||||||
"time_elapsed": time_elapsed,
|
"time_elapsed": time_elapsed,
|
||||||
"event": event,
|
"event": event,
|
||||||
"uid": uid,
|
"uid": uid,
|
||||||
"package": package,
|
"package_name": package_name,
|
||||||
"service": service,
|
"service": service,
|
||||||
})
|
})
|
||||||
|
|
||||||
|
|||||||
@@ -46,7 +46,7 @@ class DumpsysReceivers(AndroidExtraction):
|
|||||||
self.log.info("Found a receiver monitoring outgoing calls: \"%s\"",
|
self.log.info("Found a receiver monitoring outgoing calls: \"%s\"",
|
||||||
receiver["receiver"])
|
receiver["receiver"])
|
||||||
|
|
||||||
ioc = self.indicators.check_app_id(receiver["package"])
|
ioc = self.indicators.check_app_id(receiver["package_name"])
|
||||||
if ioc:
|
if ioc:
|
||||||
receiver["matched_indicator"] = ioc
|
receiver["matched_indicator"] = ioc
|
||||||
self.detected.append({intent: receiver})
|
self.detected.append({intent: receiver})
|
||||||
@@ -99,10 +99,10 @@ class DumpsysReceivers(AndroidExtraction):
|
|||||||
# If we got this far, we are processing receivers for the
|
# If we got this far, we are processing receivers for the
|
||||||
# activities we are interested in.
|
# activities we are interested in.
|
||||||
receiver = line.strip().split(" ")[1]
|
receiver = line.strip().split(" ")[1]
|
||||||
package = receiver.split("/")[0]
|
package_name = receiver.split("/")[0]
|
||||||
|
|
||||||
results[intent].append({
|
results[intent].append({
|
||||||
"package": package,
|
"package_name": package_name,
|
||||||
"receiver": receiver,
|
"receiver": receiver,
|
||||||
})
|
})
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user