From e12374b7d3935205231198e91e87e5b28500410b Mon Sep 17 00:00:00 2001 From: Shreya Date: Sat, 4 Jul 2020 15:29:25 +0530 Subject: [PATCH] Add mongo query to count successful PBA attempts --- .../cc/services/attack/technique_reports/T1136.py | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/monkey/monkey_island/cc/services/attack/technique_reports/T1136.py b/monkey/monkey_island/cc/services/attack/technique_reports/T1136.py index 09e34e6de..0e4e2fffb 100644 --- a/monkey/monkey_island/cc/services/attack/technique_reports/T1136.py +++ b/monkey/monkey_island/cc/services/attack/technique_reports/T1136.py @@ -26,11 +26,12 @@ class T1136(AttackTechnique): create_user_info = list(mongo.db.telemetry.aggregate(T1136.query)) - status = [] - for pba_node in create_user_info: - status.append(pba_node['result'][1]) - status = (ScanStatus.USED.value if any(status) else ScanStatus.SCANNED.value)\ - if status else ScanStatus.UNSCANNED.value + status = ScanStatus.UNSCANNED.value + if create_user_info: + successful_PBAs = mongo.db.telemetry.count({'$or': [{'data.name': POST_BREACH_BACKDOOR_USER}, + {'data.name': POST_BREACH_COMMUNICATE_AS_NEW_USER}], + 'data.result.1': True}) + status = ScanStatus.USED.value if successful_PBAs else ScanStatus.SCANNED.value data.update(T1136.get_base_data_by_status(status)) data.update({'info': create_user_info})