h/
f d Z ddlmZ ddlZddlmZ ddlmZ ddlm Z m
Z
m Z m Z m
Z
ddlmZ ddlmZ dd lmZ ed
d
G d d
Z ed
d
G d d Z ed
d
G d d Zd dZd dZd!dZd!dZd dZd"d Z dS )#u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
) annotationsN) dataclass)Path)Any
CollectionIterableSetTuple)
hosting_panel) to_thread)
CloudwaysUserT)eqfrozenc $ e Zd ZU ded< ded< dS )MalwareDatabaseHitErrorintcodestrmessageN__name__
__module__ __qualname____annotations__ T/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/scan/mds/report.pyr r " s"
IIILLLLLr r c e Zd ZU ded< ded< ded< ded< ded< ded< ded < d
ed < ded < ded
< dZded< dZded< dZded< dZded< d Ze d d Z
e d!d Z e d d Z e d"d Z
dS )#MalwareDatabaseHitInfor scan_idpath signatureapp_namedb_hostdb_namer db_portz#Tuple[MalwareDatabaseHitError, ...]errorsowneruserNz
str | None
table_name table_fieldz
int | None
table_row_infsnippetc N | j | j | j | j | j | j fS N)r! r# r$ r& r% r" )selfs r _get_db_infoz#MalwareDatabaseHitInfo._get_db_info9 s* I M L L L N
r return Iterable[MalwareDatabaseHitInfo]c # K | dg | dg z }|d }|d }t j t | ||| }t |||d |d |d t d |d D |d
|| } |r0|D ]+}
| di | |
d |
d
d dV ,d S | di | dddV d S )Ndetailed_reportsdetailed_urls_reportsr!
app_owner_uidapp
database_host
database_namec 3 N K | ] }t |d |d V !dS r r Nr .0errs r z5MalwareDatabaseHitInfo.from_report..U sH (F S^DD r
error_list
database_port r r! r# r$ r% r' r& r( r) sigidsnpt )r" r- zBAD URLr )getr
override_uid_by_pathr dicttuple) clsreportusers_from_panelpw_allr r5 r! r( r) hit_info_paramsdetailed_reports r from_reportz"MalwareDatabaseHitInfo.from_reportC s "::&8"==
#RA
A
6NO,!6 JJ /
+/E]?+?+ !,/ ?+
+
+
+
#3
c % -g 6 + / / ; ;
# !#
r datarJ c
+ $ K | dg D ]v}| dg D ]]}| dg D ]D} | d |d |d |d t | | d d|V E^wd S )
Ntablesfieldsrow_idsrE tablefieldrF )r" r* r+ r, r- r )rH r )rL rS kwargsrX rY row_ids r _get_hits_from_reportz,MalwareDatabaseHitInfo._get_hits_from_reportk s XXh++
E 8R00
#ii 2 6 6 F # "&w-#(>$)'N&)&kk $ 0 0 !
r c
# K |d }|d }t j t | ||| }|||d |d |d t d |d D |d ||d }| d
g | d g z } | D ]}
| j |
fi |E d {V d S ) Nr! r7 r8 r9 r: c 3 N K | ] }t |d |d V !dS r< r= r> s r rA z?MalwareDatabaseHitInfo.iter_from_scan_report.. sH (F S^DD r rB rC rD r5 r6 )r
rI r rK rH r\ ) rL rM rN rO r r! r( r) rZ r5 rQ s r iter_from_scan_reportz,MalwareDatabaseHitInfo.iter_from_scan_report{ s( 6NO,!6 JJ /
u
o. o. !,/ o.
"::&8"==
#RA
A
0 L LO0s0 KKFKK K K K K K K K K L Lr hitsset[MalwareDatabaseHitInfo]c i }|D ] }| }||vr|||< t | S r/ )r1 setvalues)rL r` db_hitshitdb_infos r get_hits_per_dbz&MalwareDatabaseHitInfo.get_hits_per_db sW ' 'C&&((Gg%%#& 7>>##$$$r )r2 r3 )rS rJ r2 r3 )r` r3 r2 ra )r r r r r* r+ r, r- r1 classmethodrR r\ r_ rh r r r r r ( sK LLL
IIINNNMMMLLLLLLLLL////JJJ
III !J!!!! "K"""" $M$$$$ G
% % % [%N
[
L L L [ L> % % % [% % %r r c B e Zd ZU ded< ded< ded< ded< ded< dS ) MalwareDatabaseScanReportzSet[MalwareDatabaseHitInfo]r` r started completedtotal_resourcestotal_maliciousNr r r r rk rk sH %%%%LLLNNNr rk reportsIterable[dict]r2 r c R t t d | D d S )Nc 3 8 K | ]}|d |d z V dS )
start_time running_timeNr r? rM s r rA z'_last_completed_time.. sE
|$vn'==
r r default)r maxrp s r _last_completed_timer{ sG
%
r c R t t d | D d S )Nc 3 & K | ] }|d V
dS )rt Nr rv s r rA z&_first_started_time.. s' ??VF<(??????r r rw )r minrz s r _first_started_timer s, s??w???KKK L LLr c > t t d | S )Nc | d d uS )Nr8 r rs r z_found.. s 5!5 r iterfilterrz s r _foundr s 55w?? @ @@r c > t t d | S )Nc | d dk S )N#count_of_detected_malicious_entriesr r r s r r z _malicious.. s a=>B r r rz s r
_maliciousr s* B B
r c 4 t d | D S )Nc 3 B K | ]}| d d V dS )
rows_countr N)rH rv s r rA z&_total_scanned_rows.. s0 AAvvzz,**AAAAAAr )sumrz s r _total_scanned_rowsr s AAAAA A AAr hit_report_listCollection[dict]r r c
K t t j d {V }t t
j d {V }t }t t | D ]/}|t t
|||| z }0t | }t | }t | }t | } t ||||| S r/ )rc r HostingPanel get_usersr pwdgetpwallr r r r_ r r{ r lenrk )
r r rN rO r` rM rl rm rn ro s
r scan_reportr s !;!=!=!G!G!I!IIIIIIIJJ S\**
*
*
*
*
*
*F 55D VO 4 455
" 8 8(&'
"/22G$_55I)/::O$iiO $ gy/? r )rp rq r2 r )rp rq r2 rq )r r r r r2 rk ) __doc__
__future__r r dataclassesr pathlibr typingr r r r r
defence360agent.subsys.panelsr defence360agent.utils.threadsr imav.malwarelib.utils.cloudwaysr
r r rk r{ r r r r r r r r r s * # " " " " "
! ! ! ! ! ! 8 8 8 8 8 8 8 8 8 8 8 8 8 8 7 7 7 7 7 7 3 3 3 3 3 3 9 9 9 9 9 9 d4 !
d4 {% {% {% {% {% {% {% ! {%| d4 ! M M M MA A A A B B B B r