forked from p15670423/monkey
Agent: Add TODOs in automated master and process collection list PBA
This commit is contained in:
parent
7cee2e49a2
commit
417f40d62d
|
@ -176,6 +176,9 @@ class AutomatedMaster(IMaster):
|
||||||
)
|
)
|
||||||
|
|
||||||
def _run_pba(self, pba: Tuple[str, Dict]):
|
def _run_pba(self, pba: Tuple[str, Dict]):
|
||||||
|
# TODO: This is the class's name right now. We need `display_name` (see the
|
||||||
|
# ProcessListCollection PBA). This is shown in the Security report as the PBA
|
||||||
|
# name and is checked against in the T1082's mongo query in the ATT&CK report.
|
||||||
name = pba[0]
|
name = pba[0]
|
||||||
options = pba[1]
|
options = pba[1]
|
||||||
|
|
||||||
|
|
|
@ -16,6 +16,9 @@ except NameError:
|
||||||
|
|
||||||
|
|
||||||
class ProcessListCollection(PBA):
|
class ProcessListCollection(PBA):
|
||||||
|
# TODO: (?) Move all PBA consts into their classes
|
||||||
|
display_name = POST_BREACH_PROCESS_LIST_COLLECTION
|
||||||
|
|
||||||
def __init__(self):
|
def __init__(self):
|
||||||
super().__init__(POST_BREACH_PROCESS_LIST_COLLECTION)
|
super().__init__(POST_BREACH_PROCESS_LIST_COLLECTION)
|
||||||
|
|
||||||
|
@ -51,4 +54,4 @@ class ProcessListCollection(PBA):
|
||||||
}
|
}
|
||||||
continue
|
continue
|
||||||
|
|
||||||
return self.command, [str(processes), success_state]
|
return self.command, (str(processes), success_state)
|
||||||
|
|
Loading…
Reference in New Issue