p15670423
/
monkey
1
0
Fork 5
Code Issues Pull Requests 3 Projects Releases Wiki Activity

Agent: Add event tag constants for Mimikatz credential collector

This commit is contained in:
Shreya Malviya 2022-08-16 13:13:00 +05:30
parent d745e10bf1
commit b5058ce611
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
monkey/infection_monkey/credential_collectors/mimikatz_collector/mimikatz_credential_collector.py
View File

@ -12,6 +12,17 @@ from .windows_credentials import WindowsCredentials
logger = logging.getLogger(__name__) logger = logging.getLogger(__name__)
MIMIKATZ_CREDENTIAL_COLLECTOR_TAG = "MimikatzCredentialsStolen"
T1003_ATTACK_TECHNIQUE_TAG = "T1003"
T1005_ATTACK_TECHNIQUE_TAG = "T1005"
MIMIKATZ_EVENT_TAGS = {
MIMIKATZ_CREDENTIAL_COLLECTOR_TAG,
T1003_ATTACK_TECHNIQUE_TAG,
T1005_ATTACK_TECHNIQUE_TAG,
}
class MimikatzCredentialCollector(ICredentialCollector): class MimikatzCredentialCollector(ICredentialCollector):
def __init__(self, event_queue: IEventQueue): def __init__(self, event_queue: IEventQueue):
self._event_queue = event_queue self._event_queue = event_queue