Add improved heuristic detections to AppOps module

This commit is contained in:
Donncha Ó Cearbhaill
2025-01-30 13:02:26 +01:00
parent 0962383b46
commit 43901c96a0
4 changed files with 68 additions and 14 deletions
@@ -21,4 +21,9 @@ class TestDumpsysAppOpsModule:
run_module(m)
assert len(m.results) == 12
assert len(m.timeline) == 16
assert len(m.detected) == 0
detected_by_ioc = [
detected for detected in m.detected if detected.get("matched_indicator")
]
assert len(m.detected) == 1
assert len(detected_by_ioc) == 0