p20319658
/
monkey
forked from p34709852/monkey
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Realize the previous idea was stupid and aggregate all exploit attempts based on status alone

This commit is contained in:
Shay Nehmad 2019-09-01 12:10:27 +03:00
parent e7953defdc
commit f7d66e0ebc
1 changed files with 5 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
monkey/monkey_island/cc/services/telemetry/zero_trust_tests/machine_exploited.py
View File

@ -34,19 +34,11 @@ def test_machine_exploited(telemetry_json):
) )
status = STATUS_FAILED status = STATUS_FAILED
# aggregate only passed tests (which means exploit failed). Each successful exploit gets its own finding. AggregateFinding.create_or_add_to_existing(
if status == STATUS_FAILED: test=TEST_MACHINE_EXPLOITED,
Finding.save_finding( status=status,
test=TEST_MACHINE_EXPLOITED, events=events
status=status, )
events=events
)
else:
AggregateFinding.create_or_add_to_existing(
test=TEST_MACHINE_EXPLOITED,
status=status,
events=events
)
AggregateFinding.create_or_add_to_existing( AggregateFinding.create_or_add_to_existing(
test=TEST_MALICIOUS_ACTIVITY_TIMELINE, test=TEST_MALICIOUS_ACTIVITY_TIMELINE,