From ea7b9066ba217c21b6fa21a3059a68fb082f9ff4 Mon Sep 17 00:00:00 2001 From: tek Date: Tue, 25 Apr 2023 11:21:55 +0200 Subject: [PATCH] Improves iOS app detection --- mvt/ios/modules/mixed/applications.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/mvt/ios/modules/mixed/applications.py b/mvt/ios/modules/mixed/applications.py index 0e0d23a..92052ab 100644 --- a/mvt/ios/modules/mixed/applications.py +++ b/mvt/ios/modules/mixed/applications.py @@ -61,8 +61,8 @@ class Applications(IOSExtraction): self.detected.append(result) continue - if result.get("sourceApp", "com.apple.AppStore") != "com.apple.AppStore": - self.log.warning("Suspicious app not installed from the App Store: %s", result["softwareVersionBundleId"]) + if result.get("sourceApp", "com.apple.AppStore") not in ["com.apple.AppStore", "com.apple.dmd", "dmd"]: + self.log.warning("Suspicious app not installed from the App Store or MDM: %s", result["softwareVersionBundleId"]) self.detected.append(result) def _parse_itunes_timestamp(self, entry: Dict[str, Any]) -> None: