fix: Some fixes to the caching

- invalid linebreaks used for the hids caching
- added sha256 to the hids caches
pull/1398/head
Iglocska 2016-07-31 22:56:19 +02:00
parent 2d3b3aa772
commit 1b73e38621
3 changed files with 10 additions and 3 deletions

View File

@ -142,10 +142,10 @@ class EventShell extends AppShell
$file->write(''); $file->write('');
if (!empty($rules)) { if (!empty($rules)) {
foreach ($rules as $rule) { foreach ($rules as $rule) {
$file->append($rule . '\n'); $file->append($rule . PHP_EOL);
} }
} else { } else {
$file->append("No exportable " . $type . "s found. " . '\n'); $file->append("No exportable " . $type . "s found. " . PHP_EOL);
} }
$file->close(); $file->close();
$timeDelta = (time()-$timeStart); $timeDelta = (time()-$timeStart);

View File

@ -134,6 +134,13 @@ class Event extends AppModel {
'canHaveAttachments' => false, 'canHaveAttachments' => false,
'description' => 'Click on one of these two buttons to download all SHA1 checksums contained in file-related attributes. This list can be used to feed forensic software when searching for susipicious files. Only published events and attributes marked as IDS Signature are exported.', 'description' => 'Click on one of these two buttons to download all SHA1 checksums contained in file-related attributes. This list can be used to feed forensic software when searching for susipicious files. Only published events and attributes marked as IDS Signature are exported.',
), ),
'sha256' => array(
'extension' => '.txt',
'type' => 'SHA256',
'requiresPublished' => 1,
'canHaveAttachments' => false,
'description' => 'Click on one of these two buttons to download all SHA256 checksums contained in file-related attributes. This list can be used to feed forensic software when searching for susipicious files. Only published events and attributes marked as IDS Signature are exported.',
),
'text' => array( 'text' => array(
'extension' => '.txt', 'extension' => '.txt',
'type' => 'TEXT', 'type' => 'TEXT',

View File

@ -41,7 +41,7 @@ class Job extends AppModel {
'org_id' => $user['Role']['perm_site_admin'] ? 0 : $user['org_id'], 'org_id' => $user['Role']['perm_site_admin'] ? 0 : $user['org_id'],
'message' => 'Fetching events.', 'message' => 'Fetching events.',
); );
if ($type === 'md5' || $type === 'sha1') { if ($type === 'md5' || $type === 'sha1' || $type = 'sha256') {
$extra = $type; $extra = $type;
$type = 'hids'; $type = 'hids';
} }