p17860254
/
monkey
forked from p15670423/monkey
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Agent: Add function to publish credentials stolen event in Mimikatz credential collector

This commit is contained in:
Shreya Malviya 2022-08-16 13:14:29 +05:30
parent b5058ce611
commit e03f140749
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
monkey/infection_monkey/credential_collectors/mimikatz_collector/mimikatz_credential_collector.py
View File

@ -3,6 +3,7 @@ from typing import Sequence
from common.credentials import Credentials, LMHash, NTHash, Password, Username from common.credentials import Credentials, LMHash, NTHash, Password, Username
from common.event_queue import IEventQueue from common.event_queue import IEventQueue
from common.events import CredentialsStolenEvent
from infection_monkey.i_puppet import ICredentialCollector from infection_monkey.i_puppet import ICredentialCollector
from infection_monkey.model import USERNAME_PREFIX from infection_monkey.model import USERNAME_PREFIX
@ -64,3 +65,12 @@ class MimikatzCredentialCollector(ICredentialCollector):
credentials.append(Credentials(identity, None)) credentials.append(Credentials(identity, None))
return credentials return credentials
def _publish_credentials_stolen_event(self, collected_credentials: Sequence[Credentials]):
credentials_stolen_event = CredentialsStolenEvent(
target=None,
tags=frozenset(MIMIKATZ_EVENT_TAGS),
stolen_credentials=collected_credentials,
)
self.event_queue.publish(credentials_stolen_event)