21525be192
agent: Use ITelem in ITelemetryMessenger.send() typehint
2021-06-24 13:55:09 -04:00
46da0b7b1f
agent: Add ITelem interface
...
Create a telemetry interface that sits above the BaseTelem abstract
class to allow telemetries to be extended without inheritance.
2021-06-24 12:07:14 -04:00
77e3c8a257
agent: Add telemetry messenger interface
...
The telemetry classes have too many responsibilities. At the moment, one
such responsibility is to send themselves to the island. As our plugin
interfaces develop, the need may arise to send telemetry using different
mechanisms. To isolate the RansomwarePayload from these changes, the
ITelemetryMessenger interface is introduced in this commit. It provides
a send_telemetry() method that handles the specific details of how
telemetry is sent to the Island.
At the present time, the TelemetryMessengerWrapper class is introduced
to handle sending telemetry. It simply wraps the existing send() method
on the telemetry class.
2021-06-24 10:26:00 -04:00
cec8341b17
tests: Add unit tests for ransomware telem
2021-06-24 10:26:00 -04:00
29bd48f703
telem: Add ransomware telemetry
2021-06-24 10:26:00 -04:00
d600aa7208
telem: Add telem category for ransomware
2021-06-24 10:26:00 -04:00
6744ee71fc
Merge pull request #1264 from guardicore/ransomware-bitflip-encryption
...
Ransomware bitflip encryption
2021-06-24 08:24:52 -04:00
ef209a693c
agent: Remove second file from test_file_encrypted_in_place()
2021-06-24 07:00:44 -04:00
f1e592380b
agent: Rename test_file_with_included_extension_encrypted
2021-06-24 07:00:06 -04:00
97bc0fd205
docs: Add more information about the safety and sufficiency of the ransomware simulation
2021-06-24 14:41:38 +05:30
91c3a6cb0d
docs: Reword some content on the ransomware page
2021-06-24 13:19:39 +05:30
70480c7011
agent: Rename RansomwareBitflipEncryptor -> BitflipEncryptor
2021-06-23 11:05:34 -04:00
1929ea7dae
agent: Add file_selectors.select_production_safe_target_files()
2021-06-23 11:01:58 -04:00
97cf198965
agent: Narrow the responsibilities of RansomwareBitflipEncryptor
2021-06-23 10:50:14 -04:00
da204416e6
docs: Add reference page for ransomware
2021-06-23 19:45:43 +05:30
2ea5dc6ac7
tests: Add missing test_lib.dll
...
The .gitignore file prevents dlls from being added to git. Since this
isn't a real dll, but is only used for testing, we can add it anyway.
2021-06-23 09:57:27 -04:00
9165737389
agent: Use larger chunk size in RansomwarePayload
...
The larger chunk size improves efficiency by reducing the number of
reads.
2021-06-23 09:42:12 -04:00
ae0dfec3cc
agent: Return results from RansomwareBitflipEncryptor.encrypt_files()
2021-06-23 09:37:33 -04:00
f1a365def2
agent: Add unit test for RansomwareBitflipEncryptor
2021-06-23 09:19:46 -04:00
707b40608a
tests: Extract ransomware target files to ransomware_target_files.py
2021-06-23 09:08:36 -04:00
d99811f83f
tests: Move ransomware_target() fixture to ransomware/conftest.py
2021-06-23 09:04:24 -04:00
45ba743418
tests: Move hash_file() into tests/utils.py
2021-06-23 09:01:42 -04:00
ab40518881
agent: Extract bitflip encryption into its own class
2021-06-23 08:56:12 -04:00
2c97d04673
Agent: Don't run ransomware payload if no directory was specified
2021-06-23 08:34:09 -04:00
7149e112b0
agent: Remove dirs_exist_ok from shutil.copytree() call
...
The dirs_exist_ok parameter of shutil.copytree() was introduced in
Python 3.8. Since the agent uses python3.7 in order to be more
compatible with older systems, we can't use this parameter.
2021-06-23 08:14:34 -04:00
6307606010
Remove get_files_to_encrypt from Vulture's allow list
2021-06-23 07:14:57 -04:00
297adcf015
agent: Don't redefine EXTENSION in ransomware tests
2021-06-23 07:10:55 -04:00
447138c079
agent: Rename RansomewarePayload.target_dir -> _target_dir
2021-06-23 06:57:31 -04:00
cef3bd618d
agent: Test that ransomware payload does not encrypt recursively
2021-06-23 06:57:31 -04:00
2dd75d7d0c
agent: Rename files encrypted by ransomware with .m0nk3y extension
2021-06-23 06:57:31 -04:00
1ff348d2fc
agent: Add in-place, bitflip encryption to RansomwarePayload
2021-06-23 06:57:31 -04:00
3edaffa922
agent: Add utility functions for flipping bits
2021-06-23 06:57:31 -04:00
2b1ba994a4
agent: Remove errant "f" in format string
2021-06-23 06:55:35 -04:00
8226512340
Merge pull request #1263 from guardicore/ransomware-ignore-links
...
Ransomware ignore links
2021-06-23 06:41:47 -04:00
b35670eadb
Merge branch 'ransomware-iterate-files' into develop
2021-06-23 06:41:07 -04:00
8ee1ce6706
agent: Update unit test for build_monkey_commandline
...
Co-authored-by: Mike Salvatore <mike.s.salvatore@gmail.com>
2021-06-23 11:22:38 +02:00
b65b26e856
agent: Join monkey cmdline for log
...
Co-authored-by: Mike Salvatore <mike.s.salvatore@gmail.com>
2021-06-23 11:22:38 +02:00
feaa7ee867
agent: Resolve empty space in build_monkey_commandline
2021-06-23 11:22:38 +02:00
5a871da26a
agent: Move GUID import to other imports
2021-06-23 11:22:38 +02:00
8c7fe00182
agent: Rename monkey_options to monkey_cmd_args
2021-06-23 11:22:38 +02:00
680b1f54d0
agent: Add type hinting to commands
2021-06-23 11:22:38 +02:00
e93df01e69
agent: Remove logging in commands
2021-06-23 11:22:38 +02:00
a158665f2b
agent: Change absolute path to full path in get_monkey_commandline_linux
2021-06-23 11:22:38 +02:00
af974fae70
agent: Modify unit test for commands
2021-06-23 11:22:38 +02:00
36a9e02181
agent: Replace f-strings with explicit conversion
2021-06-23 11:22:38 +02:00
5c5d96f79d
agent: Remove unnecessary log
2021-06-23 11:22:38 +02:00
b93be212f4
Add name consistency for get_monkey_commandline
2021-06-23 11:22:38 +02:00
d76e69fffe
Add commands unit test_get_monkey_cmd_lines_linux
2021-06-23 11:22:38 +02:00
9a3d015503
Add commands unit test_get_monkey_cmd_lines_windows
2021-06-23 11:22:38 +02:00
b1dd08b390
Add depth unit tests for test_build_monkey_commandline_explicitly
2021-06-23 11:22:38 +02:00
Mike Salvatore
Shreya
ilija-lazoroski
Ilija Lazoroski