p15670423
/
monkey
1
0
Fork 5
Code Issues Pull Requests 3 Projects Releases Wiki Activity

Realize the previous idea was stupid and aggregate all exploit attempts based on status alone

This commit is contained in:
Shay Nehmad 2019-09-01 12:10:27 +03:00
parent e7953defdc
commit f7d66e0ebc
1 changed files with 5 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
monkey/monkey_island/cc/services/telemetry/zero_trust_tests/machine_exploited.py
View File

@ -34,19 +34,11 @@ def test_machine_exploited(telemetry_json):
)
status = STATUS_FAILED
# aggregate only passed tests (which means exploit failed). Each successful exploit gets its own finding.
if status == STATUS_FAILED:
Finding.save_finding(
test=TEST_MACHINE_EXPLOITED,
status=status,
events=events
)
else:
AggregateFinding.create_or_add_to_existing(
test=TEST_MACHINE_EXPLOITED,
status=status,
events=events
)
AggregateFinding.create_or_add_to_existing(
test=TEST_MACHINE_EXPLOITED,
status=status,
events=events
)
AggregateFinding.create_or_add_to_existing(
test=TEST_MALICIOUS_ACTIVITY_TIMELINE,