CIRCL
/
AIL-framework
mirror of https://github.com/CIRCL/AIL-framework
2
1
Fork 0
Code Issues Releases Wiki Activity

chg: [trackers] add warnings logs

pull/586/head
Terrtia 2022-09-09 11:25:51 +02:00
parent 2d2e4a653e
commit 2fadbc8b87
No known key found for this signature in database
GPG Key ID: 1E1B1F50D84613D0
4 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
bin/trackers/Tracker_Regex.py
View File

@ -74,6 +74,7 @@ class Tracker_Regex(AbstractModule):
item_date = item.get_date() item_date = item.get_date()
item_source = item.get_source() item_source = item.get_source()
print(f'new tracked regex found: {tracker} in {item_id}') print(f'new tracked regex found: {tracker} in {item_id}')
self.redis_logger.warning(f'new tracked regex found: {tracker} in {item_id}')
for tracker_uuid in uuid_list: for tracker_uuid in uuid_list:
# Source Filtering # Source Filtering

4
bin/trackers/Tracker_Term.py
View File

@ -113,14 +113,14 @@ class Tracker_Term(AbstractModule):
nb_uniq_word += 1 nb_uniq_word += 1
if nb_uniq_word >= nb_words_threshold: if nb_uniq_word >= nb_words_threshold:
self.new_term_found(word_set, 'set', item) self.new_term_found(word_set, 'set', item)
def new_term_found(self, term, term_type, item): def new_term_found(self, term, term_type, item):
uuid_list = Term.get_term_uuid_list(term, term_type) uuid_list = Term.get_term_uuid_list(term, term_type)
item_id = item.get_id() item_id = item.get_id()
item_date = item.get_date() item_date = item.get_date()
item_source = item.get_source() item_source = item.get_source()
self.redis_logger.info(f'new tracked term found: {term} in {item_id}') self.redis_logger.warning(f'new tracked term found: {term} in {item_id}')
print(f'new tracked term found: {term} in {item_id}') print(f'new tracked term found: {term} in {item_id}')
for term_uuid in uuid_list: for term_uuid in uuid_list:
tracker_sources = Tracker.get_tracker_uuid_sources(term_uuid) tracker_sources = Tracker.get_tracker_uuid_sources(term_uuid)

1
bin/trackers/Tracker_Typo_Squatting.py
View File

@ -67,6 +67,7 @@ class Tracker_Typo_Squatting(AbstractModule):
item_source = item.get_source() item_source = item.get_source()
#self.redis_logger.info(f'new tracked typo found: {tracker} in {item_id}') #self.redis_logger.info(f'new tracked typo found: {tracker} in {item_id}')
print(f'new tracked typosquatting found: {tracker} in {item_id}') print(f'new tracked typosquatting found: {tracker} in {item_id}')
self.redis_logger.warning(f'tracker typosquatting: {tracker} in {item_id}')
print(Tracker.get_tracker_uuid_list(tracker, tracker_type)) print(Tracker.get_tracker_uuid_list(tracker, tracker_type))
for tracker_uuid in Tracker.get_tracker_uuid_list(tracker, tracker_type): for tracker_uuid in Tracker.get_tracker_uuid_list(tracker, tracker_type):

2
bin/trackers/Tracker_Yara.py
View File

@ -60,7 +60,7 @@ class Tracker_Yara(AbstractModule):
try: try:
yara_match = self.rules.match(data=item_content, callback=self.yara_rules_match, which_callbacks=yara.CALLBACK_MATCHES, timeout=60) yara_match = self.rules.match(data=item_content, callback=self.yara_rules_match, which_callbacks=yara.CALLBACK_MATCHES, timeout=60)
if yara_match: if yara_match:
self.redis_logger.info(f'{self.item.get_id()}: {yara_match}') self.redis_logger.warning(f'tracker yara: new match {self.item.get_id()}: {yara_match}')
print(f'{self.item.get_id()}: {yara_match}') print(f'{self.item.get_id()}: {yara_match}')
except yara.TimeoutError as e: except yara.TimeoutError as e:
print(f'{self.item.get_id()}: yara scanning timed out') print(f'{self.item.get_id()}: yara scanning timed out')