S@52 d Z ddlmZ ddlmZmZmZ ddlmZm Z m
Z
m Z m Z m
Z
mZmZmZmZ ddlmZ ddlmZmZ G d de Z G d d
e Z G d d e Z G d
de Z G d dee e Z G d dee ee Z G d dee Z G d de Z G d de Z G d de Z G d d e Z! G d d e Z" G d d e Z# G d! d"e Z$ G d# d$e e Z% G d% d&e e Z& G d' d(e e Z' G d) d*e Z( G d+ d,ee ee Z) G d- d.e Z* G d/ d0e Z+ G d1 d2e Z, G d3 d4e Z- G d5 d6e Z. G d7 d8e Z/ G d9 d:e Z0 G d; de Z2 G d? d@ee e Z3 G dA dBe Z4 G dC dDe Z5 G dE dFe Z6 G dG dHee e Z7 G dI dJe Z8 G dK dLee e Z9 G dM dNe Z: G dO dPe e Z;dQ e e5e ee eeee&e
e
f D Z.
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
)deepcopy)ListOptionalSet)
AccumulatableAck FilesUpdatedLockableMessageNoopReceived
ReportableShortenReprListMixin
Splittable)QueuedScanState)MalwareDatabaseHitInfoMalwareDatabaseScanReportc e Zd ZdZdZdS )MalwareScanTaskz/
Creates task to scan file for malware
MALWARE_SCAN_TASKN__name__
__module__ __qualname____doc__DEFAULT_METHOD L/opt/imunify360/venv/lib/python3.11/site-packages/imav/contracts/messages.pyr r , s )NNNr r c e Zd ZdZdS )MalwareScanCompleteMALWARE_SCAN_COMPLETENr r r r r r r r! r! 4 s ,NNNr r! c e Zd ZdZdS )MalwareCleanCompleteMALWARE_CLEAN_COMPLETENr# r r r r% r% 8 s -NNNr r% c e Zd ZdZdS )MalwareRestoreCompleteMALWARE_RESTORE_COMPLETENr# r r r r( r( < /NNNr r( c " e Zd ZdZ fdZ xZS )MalwareScanSummaryMALWARE_SCAN_SUMMARYc V d |D } t j |d|i| d S )Nc " g | ] }d |d i
S )summaryr .0items r
z/MalwareScanSummary.__init__..E s! @@@$)T)_-@@@r itemssuper__init__selfr5 argskwargs __class__s r r8 zMalwareScanSummary.__init__C s= @@%@@@$6e6v66666r )r r r r r8
__classcell__r= s @r r, r, @ s= +N7 7 7 7 7 7 7 7 7r r, c . e Zd ZdZdZdZdZ fdZ xZS )MalwareScanResultMALWARE_SCAN_RESULT resultsc V d |D } t j |d|i| d S )Nc h g | ]/}d |d D |d d0S )c " i | ] \ }}|d v ||
S )> r; typescanidr )r2 keyvalues r
z9MalwareScanResult.__init__...U s4 "U 888 888r r0 rE )r0 rE )r5 r1 s r r4 z.MalwareScanResult.__init__..R sd
&*9o&;&;&=&= ?
r r5 r6 r9 s r r8 zMalwareScanResult.__init__Q sL
$6e6v66666r ) r r r r LIST_SIZE
BATCH_SIZE BATCH_FIELDr8 r> r? s @r rA rA I sL *NIJK7 7 7 7 7 7 7 7 7r rA c * e Zd ZdZdZeefZdefdZ dS ) MalwareScanz+
Represents results of single scan
MALWARE_SCANreturnc 4 | d }|d uS )NrE )get)r: rE s r
do_accumulatezMalwareScan.do_accumulatej s ((9%%d""r N)
r r r r r r, rA
LIST_CLASSboolrW r r r rR rR b sK $N$&78J#t # # # # # #r rR c e Zd ZdZdZdS )MalwareMRSUploadzk
Used to isolate a possibly long running uploading to MRS from the
other MalwareScan handlers.
MALWARE_MRS_UPLOADNr r r r r[ r[ o s
*NNNr r[ c e Zd ZdZdS )MalwareScanQueueMALWARE_SCAN_QUEUENr# r r r r^ r^ x )NNNr r^ c e Zd Z fdZ xZS )MalwareScanQueuePutc N t || d S )N)paths scan_argsr6 )r: rd re r= s r r8 z MalwareScanQueuePut.__init__} s&
u :::::r r r r r8 r> r? s @r rb rb | s8 ; ; ; ; ; ; ; ; ;r rb c e Zd Z fdZ xZS )MalwareScanQueueRemovec L t | d S )N)scan_idsr6 )r: rj r= s r r8 z MalwareScanQueueRemove.__init__ s$
(+++++r rf r? s @r rh rh s8 , , , , , , , , ,r rh c e Zd Z fdZ xZS )MalwareScanQueueRecheckc H t d S Nr6 r: r= s r r8 z MalwareScanQueueRecheck.__init__
r rf r? s @r rl rl 8 r rl c e Zd Z fdZ xZS ) MalwareScanQueueStopBackgroundc H t d S rn r6 ro s r r8 z'MalwareScanQueueStopBackground.__init__ rp r rf r? s @r rs rs rq r rs c < e Zd Zddddee def fdZ xZS ) MalwareScanQueueUpdateStatusNrj statusrj rx c N t || d S )Nrw r6 )r: rj rx r= s r r8 z%MalwareScanQueueUpdateStatus.__init__ s( (6:::::r )r r r r strr r8 r> r? s @r rv rv s` '+t; ; ; 9;5D; ; ; ; ; ; ; ; ; ;r rv c $ e Zd ZdxZ\ ZZZZdZdS )MalwareResponse)BLACKWHITEKNOWNUNKNOWNMALWARE_RESPONSEN) r r r TYPESr} r~ r r r r r r r| r| s& +OOE (E5%'NNNr r| c e Zd ZdZdS )MalwareSendFilesMALWARE_SEND_FILESNr# r r r r r r` r r c e Zd ZdZdS )MalwareRescanFilesMALWARE_RESCAN_FILESNr# r r r r r +NNNr r c 4 e Zd ZdZdZdddddd fd
Z xZS )MalwareCleanupTaskz'
Creates task to cleanup files
MALWARE_CLEANUP_TASKN)
standard_onlycause initiatorscan_id post_actionc V t |||||| d S )N)hitsr r r r r r6 )r: r r r r r r r= s r r8 zMalwareCleanupTask.__init__ sB ' #
r )r r r r r r8 r> r? s @r r r sd ,N
r r c P e Zd ZdZdZdZdZedee f fd Z
xZ S )MalwareCleanupListMALWARE_CLEANUP_LISTrC rD r messagesc # | K t | D ]}t | di }|rkt |t
rVd | dg D }| |z
}|D ]}| | ||d< |V d S )Nresultc h | ] }|j
S r ) orig_file)r2 hits r z2MalwareCleanupList._split_items.. s' ! ! !&)CM! ! !r r )r7 _split_itemsr rV
isinstancedictkeyspop)clsr messager
current_paths extra_pathspathr= s r r z MalwareCleanupList._split_items s ww++H55 G gkk(B 7 788F
+*VT22
+! !-4[[-D-D! ! !
%kkmmm ; ' % %DJJt$$$$$*!MMMM r ) r r r r rN rO rP classmethodr r r r> r? s @r r r si ,NIJK
D $7
[
r r c e Zd ZdZdZeZdS )MalwareCleanupz.
Represents results of single cleanup
MALWARE_CLEANUPN)r r r r r r rX r r r r r s$ 'N#JJJr r c e Zd ZdZdS )MalwareIgnorePathUpdatedzESignal through a message bus that MalwareIgnorePath has been updated.Nr r r r r r r r r s OODr r c e Zd ZU dZeee ed< eed< eed< ee ed< ee ed< eed< eed< eed < eed
< e e
ed < ee ed < d
d
d
d
dddddeee dee dedee deded ed
ed ee e
dee d ee f fdZ de fdZ
d Zd Zd Z xZS )MalwareDatabaseScanz1
Represents results of a single MDS scan
r; r r rI errorstarted completedtotal_resourcestotal_maliciousr r r N)r r r r r r r c
` t ||||||||| |
| d S )N) r; r r rI r r r r r r r r6 )
r: r; r r rI r r r r r r r r= s
r r8 z MalwareDatabaseScan.__init__ sQ + +
r reportc l | |j |j |j |j |j d S )N)r r r r r )updater r r r r )r: r s r update_with_reportz&MalwareDatabaseScan.update_with_report sC N & " 2 " 2
r c . | | S N)r )r )r: r s r update_with_errorz%MalwareDatabaseScan.update_with_error s {{{)))r c t rn NotImplementedError)r: rK rL s r __setitem__z MalwareDatabaseScan.__setitem__" !!r c t rn r )r: rK s r __delitem__z MalwareDatabaseScan.__delitem__% r r )r r r r r r rz __annotations__intr r r8 r r r r r r> r? s @r r r s 49
III
LLL
3- C=
LLLNNN
$
%%%%} 6: ##'
tCy!
sm
sm
s123
}
C=
:
)B
* * *" " "" " " " " " "r r c e Zd ZdZdS )MalwareDatabaseRestorez4
Represents results of a single MDS restore
Nr r r r r r ) s r r c \ e Zd ZU dZeed< eed< edz ed< dedededz f fd Z xZS )MalwareDatabaseRestoreTaskz.
Represents a single MDS restore task
r app_nameN signature_idc P t ||| d S )N)r r r r6 )r: r r r r= s r r8 z#MalwareDatabaseRestoreTask.__init__8 s5
|
r r r r r rz r r8 r> r? s @r r r / s IIIMMM*
S
C
sTz
r r c e Zd ZU dZee ed< ee ed< ddee dee dee f fd
Z xZ
S )MalwareDatabaseCleanupz4
Represents results of a single mds cleanup
succeededfailedNr c P t ||| d S )N)r r r r6 )r: r r r r= s r r8 z MalwareDatabaseCleanup.__init__F s9
r rn ) r r r r r r r r rz r8 r> r? s @r r r > s )**** & '''' "&
-.
*+
#
r r c 4 e Zd ZU dZeed< def fd Z xZS ) MalwareDatabaseCleanupFailedz*
Signifies an MDS cleanup failure
r c L t | d S r r6 r: r r= s r r8 z%MalwareDatabaseCleanupFailed.__init__Z $
u%%%%%r r r? s @r r r S [ JJJ& & & & & & & & & & &r r c 4 e Zd ZU dZeed< def fd Z xZS ) MalwareDatabaseRestoreFailedz*
Signifies an MDS restore failure
r c L t | d S r r6 r s r r8 z%MalwareDatabaseRestoreFailed.__init__e r r r r? s @r r r ^ r r r c e Zd ZdZdS ) RefreshImunifyPatchSubscriptionz-Refresh Imunify Patch user subscription info.Nr r r r r r i s 7777r r c e Zd ZdZdS )MalwareCleanupRevertListMALWARE_CLEANUP_REVERT_LISTNr# r r r r r m 2NNNr r c e Zd ZeZdS )MalwareCleanupRevertN)r r r r rX r r r r r q s )JJJr r c e Zd ZdZdS )CheckDetachedScans MALWARE_CHECK_DETACHED_SCANSNr# r r r r r u s 3NNNr r c e Zd ZdZdS )VulnerabilityPatchTaskVULNERABILITY_PATCH_TASKNr# r r r r r y r* r r c e Zd ZdZdS )VulnerabilityPatchListr Nr# r r r r r } r r r c e Zd ZdZeZdS )VulnerabilityPatchr N)r r r r r rX r r r r r s &N'JJJr r c e Zd ZdZdS ) VulnerabilityPatchRevertListr Nr# r r r r r r r r c e Zd ZeZdS )VulnerabilityPatchRevertN)r r r r rX r r r r r s -JJJr r c e Zd ZdZdS )VulnerabilityPatchFailedCLEANUP_FAILEDNr# r r r r r s %NNNr r c g | ] }|j
S r )r )r2 msgs r r4 r4 s+ r N)=r copyr typingr r r "defence360agent.contracts.messagesr r r r
r r r
r r r imav.malwarelib.configr imav.malwarelib.scan.mds.reportr r r r! r% r( r, rA rR r[ r^ rb rh rl rs rv r| r r r r r r r r r r r r r r r r r r r r r r MSGS_WITHOUT_IPr r r r s * & & & & & & & & & & 3 2 2 2 2 2 ) ) ) ) )g ) ) )- - - - -' - - -. . . . .7 . . .0 0 0 0 0W 0 0 07 7 7 7 7-w
7 7 77 7 7 7 7,gz: 7 7 72
#
#
#
#
#-
#
#
#* * * * *w * * ** * * * *w * * *; ; ; ; ;* ; ; ;
, , , , , - , , ,
.
%5
; ; ; ; ;#3 ; ; ;( ( ( ( (gx ( ( (
* * * * *w * * *, , , , ,( , , ,
6 ':z 4$ $ $ $ $] $ $ $ w >" >" >" >" >"' >" >" >"B W
W
*& & & & &7 & & && & & & &7 & & &8 8 8 8 8g 8 8 83 3 3 3 3 3Wj 3 3 3* * * * *= * * *4 4 4 4 4 4 4 40 0 0 0 0W 0 0 0, , , , , 17J , , ,( ( ( ( ( ( ( (
3 3 3 3 3#7* 3 3 3. . . . .} . . .& & & & &w
& & & r