m`E {S
d Z ddlZddlmZ ddlmZ ddlmZmZ ddl m
Z
ddl m Z ddl
mZ ej e Zd ed
ed efd Zd
ededededef
dZ G d de ZdS )u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
NPath) HookEvent) MessageSinkexpect)MalwareScanType) panel_users)notifierevent_iduserbodyc K t j | || d {V d S # t $ r'}t d| | Y d }~d S d }~ww xY w)Nz#Failed to trigger an event '%s': %r)r
trigger_event Exceptionloggererror)r r r
es M/opt/imunify360/venv/lib/python3.11/site-packages/imav/plugins/event_hooks.pyr r " s I$XtT::::::::::: I I I :HaHHHHHHHHHIs "
A AApathscan_id scan_typecustom_event_id
user_event_idc K |t j k rd}|}nM|t j t j fv r1t fdt d {V D d }|}nd S t
||| d| d {V d S )N c 3 t K | ]2}t t |d k (|d V 3dS )homer Nr ).0ur s r z%trigger_scan_event..6 sN
::ai 00 & 0000
)r r )r ON_DEMAND
BACKGROUNDUSERnextr r )r r r r r kwargsr r s ` r trigger_scan_eventr' ) s O---" 1?3GH H H
*}},,,,,,
!
T44V4 r! c e Zd Zd Z eej d Z eej d Z eej
d Z dS )
EventHooksc K || _ d S )N)_loop)selfloops r create_sinkzEventHooks.create_sinkI s
r! c < K |d }|t j t j t j fv r
t j }n)|t j t j fv r
t j }nd S d |d D }|D ]!}t ||d|d i d {V "d S )Nr c h | ]
}|d S )username )r hits r z+EventHooks.malware_found..[ s :::SZ :::r! DUMPr )
r r" RESCANRESCAN_OUTDATEDr
"CUSTOM_SCAN_MALWARE_FOUND_EVENT_IDr# r$ USER_SCAN_MALWARE_FOUND_EVENT_IDr )r, eventr r usersr s r
malware_foundzEventHooks.malware_foundL s +& % " +
BHH
?57KL
L
L @HH F::E&M::: O OD $E) )r' r
CUSTOM_SCAN_STARTED_EVENT_IDUSER_SCAN_STARTED_EVENT_IDr, r: s r scan_startedzEventHooks.scan_started_ sp &M ) + 1 /)$
r! c K t |d |d |d t j t j d {V d S )Nr r r )r' r
CUSTOM_SCAN_FINISHED_EVENT_IDUSER_SCAN_FINISHED_EVENT_IDrA s r
scan_finishedzEventHooks.scan_finishedj sc &M ) + 2 0
r! N) __name__
__module__ __qualname__r. r r MalwareDetectedCriticalr< MalwareScanningStartedrB MalwareScanningFinishedrF r2 r! r r) r) H s VI -..O O /.O$ VI ,--
.-
VI -..
/.
r! r) )__doc__loggingpathlibr %defence360agent.contracts.hook_eventsr !defence360agent.contracts.pluginsr r imav.malwarelib.configr imav.malwarelib.utils.user_listr defence360agent.subsysr
getLoggerrG r strdictr r' r) r2 r! r rX sD * ; ; ; ; ; ; A A A A A A A A 2 2 2 2 2 2 7 7 7 7 7 7 + + + + + + 8 $ $I# IS I I I I I
>*
*
*
*
*
*
*
*
*
*
r!