mirror of
https://github.com/mvt-project/mvt.git
synced 2026-10-11 02:08:53 +02:00
Adds indicators check to iOS TCC module
This commit is contained in:
1 parent
1460828c30
commit
95205d8e17
3 files changed
+20
-6
No files matched your search
@@ -66,6 +66,15 @@ class TCC(IOSExtraction):
|
||||
"data": msg
|
||||
}
|
||||
|
||||
def check_indicators(self):
|
||||
if not self.indicators:
|
||||
return
|
||||
|
||||
for result in self.results:
|
||||
if self.indicators.check_process(result["client"]):
|
||||
self.log.warning("Found malicious process in TCC database: %s", result["client"])
|
||||
self.detected.append(result)
|
||||
|
||||
def process_db(self, file_path):
|
||||
conn = sqlite3.connect(file_path)
|
||||
cur = conn.cursor()
|
||||
|
||||
Reference in new issue
Block a user