Removed unused PBA processing funcs

This commit is contained in:
Shay Nehmad 2019-09-16 14:59:27 +03:00
parent bb8a5bf55d
commit 4330a39725
2 changed files with 2 additions and 5 deletions

View File

@ -108,7 +108,7 @@ class CommunicateAsNewUser(PBA):
self.send_ping_result_telemetry(ping_exit_code, commandline, username) self.send_ping_result_telemetry(ping_exit_code, commandline, username)
except Exception as e: except Exception as e:
# If failed on 1314, it's possible to try to elevate the rights of the current user with the # If failed on 1314, it's possible to try to elevate the rights of the current user with the
# "Replace a process level token" right, using Local Security Policy editing. # "Replace a process level token" right, using Local Security Policy editing.
PostBreachTelem(self, ( PostBreachTelem(self, (
"Failed to open process as user {}. Error: {}".format(username, str(e)), False)).send() "Failed to open process as user {}. Error: {}".format(username, str(e)), False)).send()
finally: finally:

View File

@ -6,16 +6,13 @@ from monkey_island.cc.services.telemetry.zero_trust_tests.communicate_as_new_use
def process_communicate_as_new_user_telemetry(telemetry_json): def process_communicate_as_new_user_telemetry(telemetry_json):
current_monkey = Monkey.get_single_monkey_by_guid(telemetry_json['monkey_guid']) current_monkey = Monkey.get_single_monkey_by_guid(telemetry_json['monkey_guid'])
success = telemetry_json['data']['result'][1]
message = telemetry_json['data']['result'][0] message = telemetry_json['data']['result'][0]
success = telemetry_json['data']['result'][1]
test_new_user_communication(current_monkey, success, message) test_new_user_communication(current_monkey, success, message)
POST_BREACH_TELEMETRY_PROCESSING_FUNCS = { POST_BREACH_TELEMETRY_PROCESSING_FUNCS = {
POST_BREACH_COMMUNICATE_AS_NEW_USER: process_communicate_as_new_user_telemetry, POST_BREACH_COMMUNICATE_AS_NEW_USER: process_communicate_as_new_user_telemetry,
# `lambda *args, **kwargs: None` is a no-op.
POST_BREACH_BACKDOOR_USER: lambda *args, **kwargs: None,
POST_BREACH_FILE_EXECUTION: lambda *args, **kwargs: None,
} }