관리-도구
편집 파일: event_hook_executor.cpython-311.pyc
� ��g� � �� � d Z ddlmZ ddlmZ ddlmZ ddlmZ ddl m Z ddl m Z ddl mZ ej ej ej ej ej fZ d d �Z G d � d e � � Zd S )u This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see <https://www.gnu.org/licenses/>. Copyright © 2019 Cloud Linux Software Inc. This software is also available under ImunifyAV commercial license, see <https://www.imunify360.com/legal/eula> � )� HookEvent)� MessageType)�expect)� execute_hooks)�EventHookExecutor)�MalwareHitStatus)� MalwareHitNc � � K � t j |d�� � \ }}|r9t j ||||||||�� � } | � | � � � d {V �� d S d S )NT)� by_scan_id�ignore_cleaned)�scan_id� scan_type�error�started�path� total_files�total_malicious�DUMP)r �malicious_listr �MalwareDetectedCritical�process_message) �sinkr r r r �totalr r �hits�malware_detecteds �U/opt/imunify360/venv/lib/python3.11/site-packages/imav/plugins/event_hook_executor.py� detected_hookr ) s� � � � � '� 5��4� � � ��O�T� � 5�$�<�� ���� � +�� � � �� �"�"�#3�4�4�4�4�4�4�4�4�4�4�4� 5� 5� c � � e Zd Z ee� d� � � Z eej � � d� � � Z eej � � d� � � Z eej � � d� � � Z dS )�ImavEventHookExecutorc � �X K � | j � t |� � � � d S �N)�_loop� create_taskr )�self�events r � receive_eventz#ImavEventHookExecutor.receive_event> s* � � � � � � � �}�U� 3� 3�4�4�4�4�4r c � �( K � |d }|rdnd}|d }d� |D � � }d� |D � � }t j |d |d |t |� � t |� � ||� � � }| j � |� � � d {V �� d S ) Nr �failed�okr c �8 � g | ]}|j t j v �|��S � )�statusr � RESTORABLE)�.0�hs r � <listcomp>zAImavEventHookExecutor.process_malware_cleanup.<locals>.<listcomp>H s( � �N�N�N��a�h�2B�2M�&M�&M�1�&M�&M�&Mr c �6 � g | ]}|� � � ��S r, )�as_dict)r/ �hits r r1 zAImavEventHookExecutor.process_malware_cleanup.<locals>.<listcomp>I s � �.�.�.�#�� � � � �.�.�.r � cleanup_idr )r5 r r r � total_cleanedr- r )r �MalwareCleanupFinished�len�_sinkr )r% �messager r- r �cleaned�dump�malware_cleanups r �process_malware_cleanupz-ImavEventHookExecutor.process_malware_cleanupB s� � � � ��� �� "�,������v���N�N�d�N�N�N��.�.��.�.�.��#�:� �|�,��I�&���D� � � �g�,�,��� � � �� �j�(�(� �9�9�9�9�9�9�9�9�9�9�9r c � �� K � |d }|� d� � sd S t | j |d |d |d |d |d |d � � � d {V �� d S )N�summaryr �scanid�typer r r )�getr r9 )r% r: r@ s r �process_malware_scanz*ImavEventHookExecutor.process_malware_scanV s� � � � ��)�$�� �{�{�6�"�"� � �F�� �J� �H� � �F�O� �I� � �F�O� �M� "� �G� � � � � � � � � � � � r c � � K � t | j |j |j |j |j |j |j � � � d {V �� d S r" )r r9 r rB r r �total_resourcesr )r% r: s r �process_malware_db_scanz-ImavEventHookExecutor.process_malware_db_scanj sd � � � �� �J� �O� �L� �O� �L� � #� �M� � � � � � � � � � � r N) �__name__� __module__� __qualname__r �EVENTSr' r �MalwareCleanupr> � MalwareScanrD �MalwareDatabaseScanrG r, r r r r = s� � � � � � � �V�V�_�5� 5� �_�5� �V�K� &�'�'�:� :� (�'�:�& �V�K� #�$�$� � � %�$� �& �V�K� +�,�,� � � -�,� � � r r r" )�__doc__�%defence360agent.contracts.hook_eventsr �"defence360agent.contracts.messagesr �!defence360agent.contracts.pluginsr � defence360agent.hooks.executer �+defence360agent.plugins.event_hook_executorr �imav.malwarelib.configr �imav.malwarelib.modelr �MalwareScanningStarted�MalwareScanningFinished�MalwareCleanupStartedr7 r rK r r r, r r �<module>rZ s ��� �* <� ;� ;� ;� ;� ;� :� :� :� :� :� :�� � � � � � 8� 7� 7� 7� 7� 7� I� I� I� I� I� I� 3� 3� 3� 3� 3� 3� ,� ,� ,� ,� ,� ,� �$� �%� �#� �$� �%� �� ;?�5� 5� 5� 5�(7 � 7 � 7 � 7 � 7 � -� 7 � 7 � 7 � 7 � 7 r