forked from p15670423/monkey
Merge pull request #414 from VakarisZ/private_key_query_fix
Attack: private key query fix, mimikatz: log message.
This commit is contained in:
commit
bd37995054
|
@ -63,5 +63,6 @@ class WindowsInfoCollector(InfoCollector):
|
|||
if "credentials" in self.info:
|
||||
self.info["credentials"].update(mimikatz_info)
|
||||
self.info["mimikatz"] = mimikatz_collector.get_mimikatz_text()
|
||||
LOG.info('Mimikatz info gathered successfully')
|
||||
else:
|
||||
LOG.info('No mimikatz info was gathered')
|
||||
|
|
|
@ -12,7 +12,7 @@ class T1145(AttackTechnique):
|
|||
used_msg = "Monkey found ssh keys on machines in the network."
|
||||
|
||||
# Gets data about ssh keys found
|
||||
query = [{'$match': {'telem_category': 'system_info_collection',
|
||||
query = [{'$match': {'telem_category': 'system_info',
|
||||
'data.ssh_info': {'$elemMatch': {'private_key': {'$exists': True}}}}},
|
||||
{'$project': {'_id': 0,
|
||||
'machine': {'hostname': '$data.hostname', 'ips': '$data.network_info.networks'},
|
||||
|
|
Loading…
Reference in New Issue