Add support for check APK certificate hash IOCs (#557)

* Fix bug loading indicators which I introduced in 81b647b

* Add support for matching on APK certificate hash IOCs
This commit is contained in:
Donncha Ó Cearbhaill
2024-10-18 16:35:50 +02:00
committed by GitHub
parent 665806db98
commit 3afe218c7c
5 changed files with 74 additions and 4 deletions
+2
View File
@@ -37,6 +37,7 @@ def indicators_factory(indicator_file):
file_names=[],
processes=[],
app_ids=[],
app_cert_hashes=[],
android_property_names=[],
files_sha256=[],
):
@@ -50,6 +51,7 @@ def indicators_factory(indicator_file):
ind.ioc_collections[0]["app_ids"].extend(app_ids)
ind.ioc_collections[0]["android_property_names"].extend(android_property_names)
ind.ioc_collections[0]["files_sha256"].extend(files_sha256)
ind.ioc_collections[0]["app_cert_hashes"].extend(app_cert_hashes)
return ind