From e1baacd0f0cae3cfd6ed795e26fbc6bcab5dfe7d Mon Sep 17 00:00:00 2001
From: VakarisZ <vakarisz@yahoo.com>
Date: Wed, 10 Jul 2019 09:00:01 +0300
Subject: [PATCH] Remote file copy identical results grouped

---
 .../cc/services/attack/technique_reports/T1105.py             | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/monkey/monkey_island/cc/services/attack/technique_reports/T1105.py b/monkey/monkey_island/cc/services/attack/technique_reports/T1105.py
index 176bae052..3d95fd88d 100644
--- a/monkey/monkey_island/cc/services/attack/technique_reports/T1105.py
+++ b/monkey/monkey_island/cc/services/attack/technique_reports/T1105.py
@@ -16,7 +16,9 @@ class T1105(AttackTechnique):
              {'$project': {'_id': 0,
                            'src': '$data.src',
                            'dst': '$data.dst',
-                           'filename': '$data.filename'}}]
+                           'filename': '$data.filename'}},
+             {'$group': {'_id': {'src': '$src', 'dst': '$dst', 'filename': '$filename'}}},
+             {"$replaceRoot": {"newRoot": "$_id"}}]
 
     @staticmethod
     def get_report_data():