h: b d Z ddlmZ ddlZddlmZ ddlmZ ddlm Z m
Z
m Z m Z ddl
mZ ddlmZ dd lmZ ed
d
G d d
Z ed
d
G d d Z ed
d
G d d Zd dZd dZd!dZd!dZd dZd"d ZdS )#u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
) annotationsN) dataclass)Path)
CollectionIterableSetTuple)
hosting_panel) to_thread)
CloudwaysUserT)eqfrozenc $ e Zd ZU ded< ded< dS )MalwareDatabaseHitErrorintcodestrmessageN__name__
__module__ __qualname____annotations__ T/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/scan/mds/report.pyr r " s"
IIILLLLLr r c e Zd ZU ded< ded< ded< ded< ded< ded< ded < d
ed < ded < ded
< dZded< dZded< dZded< dZded< d Ze d d Z
e d d Z e d d Z e d!d Z
dS )"MalwareDatabaseHitInfor scan_idpath signatureapp_namedb_hostdb_namer db_portz#Tuple[MalwareDatabaseHitError, ...]errorsowneruserN
table_name table_field
table_row_infsnippetc B | j | j | j | j | j fS N)r r" r# r% r$ )selfs r _get_db_infoz#MalwareDatabaseHitInfo._get_db_info9 s% I M L L L
r hits Iterable[MalwareDatabaseHitInfo]returnset[MalwareDatabaseHitInfo]c i }|D ] }| }||vr|||< t | S r. )r0 setvalues)clsr1 db_hitshitdb_infos r get_hits_per_dbz&MalwareDatabaseHitInfo.get_hits_per_dbB sW ' 'C&&((Gg%%#& 7>>##$$$r c
d}d }| d p| d }|r%|d }|d }| d }|d } |d }
t j t | |
|| } | || ||d |d
|d t d |d
D |d |
| | S )NzBAD URLdetailed_reportsdetailed_urls_reportsr sigidsnptr
app_owner_uidapp
database_host
database_namec 3 N K | ] }t |d |d V !dS r r Nr .0errs r z5MalwareDatabaseHitInfo.from_report..h sH (F S^DD r
error_list
database_port) r r r! r" r# r$ r& r% r' r( r, )getr override_uid_by_pathr tuple) r8 reportusers_from_panelpw_allr r! r, r> detailed_reportr r' r( s r from_reportz"MalwareDatabaseHitInfo.from_reportM s !::&899
VZZ #>
>
2 .q 1O'0I%))&11G6NO,!6 JJ /
s E]?+?+ !,/ ?+
r datadictc
+ $ K | dg D ]v}| dg D ]]}| dg D ]D} | d |d |d |d t | | d d|V E^wd S )
Ntablesfieldsrow_idsr@ tablefieldrA )r! r) r* r+ r, r )rO r )r8 rW kwargsr] r^ row_ids r _get_hits_from_reportz,MalwareDatabaseHitInfo._get_hits_from_reportr s XXh++
E 8R00
#ii 2 6 6 F # "&w-#(>$)'N&)&kk $ 0 0 !
r c
# K |d }|d }t j t | ||| }|||d |d |d t d |d D |d ||d }| d
x} r| D ]}
| j |
fi |E d {V d S | d g D ]}
| j |
fi |E d {V d S ) Nr rB rC rD rE c 3 N K | ] }t |d |d V !dS rG rH rI s r rL z?MalwareDatabaseHitInfo.iter_from_scan_report.. sH (F S^DD r rM rN ) r r r" r# r$ r& r% r' r( r> r? )r rP r rQ rO ra ) r8 rR rS rT r r r' r( r_ r> rU s r iter_from_scan_reportz,MalwareDatabaseHitInfo.iter_from_scan_report so 6NO,!6 JJ /
u
o. o. !,/ o.
&zz*< = = = P#3
P
P434_OOOOOOOOOOOO
P
P $*::.Er#J#J
P
P434_OOOOOOOOOOOO
P
Pr )r1 r2 r3 r4 )r3 r )rW rX r3 r2 )r3 r2 )r r r r r) r* r+ r, r0 classmethodr< rV ra rd r r r r r ( sM LLL
IIINNNMMMLLLLLLLLL////JJJ
IIIJK M G
% % % [% "
"
"
["
H
[
P P P [ P P Pr r c B e Zd ZU ded< ded< ded< ded< ded< dS ) MalwareDatabaseScanReportzSet[MalwareDatabaseHitInfo]r1 r started completedtotal_resourcestotal_maliciousNr r r r rg rg sH %%%%LLLNNNr rg reportsIterable[dict]r3 r c R t t d | D d S )Nc 3 8 K | ]}|d |d z V dS )
start_time running_timeNr rJ rR s r rL z'_last_completed_time.. sE
|$vn'==
r r default)r maxrl s r _last_completed_timerw sG
%
r c R t t d | D d S )Nc 3 & K | ] }|d V
dS )rp Nr rr s r rL z&_first_started_time.. s' ??VF<(??????r r rs )r minrv s r _first_started_timer{ s, s??w???KKK L LLr c > t t d | S )Nc | d d uS )NrC r rs r z_found.. s 5!5 r iterfilterrv s r _foundr s 55w?? @ @@r c > t t d | S )Nc | d dk S )N#count_of_detected_malicious_entriesr r r~ s r r z _malicious.. s a=>B r r rv s r
_maliciousr s* B B
r c 4 t d | D S )Nc 3 B K | ]}| d d V dS )
rows_countr N)rO rr s r rL z&_total_scanned_rows.. s0 AAvvzz,**AAAAAAr )sumrv s r _total_scanned_rowsr s AAAAA A AAr hit_report_listCollection[dict]r r c
K t t j d {V }t t
j d {V }t }t t | D ]/}|t t
|||| z }0t | }t | }t | }t | } t ||||| S r. )r6 r
HostingPanel get_usersr pwdgetpwallr r r rd r{ rw r lenrg )
r r rS rT r1 rR rh ri rj rk s
r scan_reportr s !;!=!=!G!G!I!IIIIIIIJJ S\**
*
*
*
*
*
*F 55D VO 4 455
" 8 8(&'
"/22G$_55I)/::O$iiO $ gy/? r )rl rm r3 r )rl rm r3 rm )r r r r r3 rg ) __doc__
__future__r r dataclassesr pathlibr typingr r r r defence360agent.subsys.panelsr
defence360agent.utils.threadsr imav.malwarelib.utils.cloudwaysr r r rg rw r{ r r r r r r r r s * # " " " " "
! ! ! ! ! ! 3 3 3 3 3 3 3 3 3 3 3 3 7 7 7 7 7 7 3 3 3 3 3 3 9 9 9 9 9 9 d4 !
d4 xP xP xP xP xP xP xP ! xPv d4 ! M M M MA A A A B B B B r