관리-도구
편집 파일: event_hooks.cpython-311.pyc
� ��gs � �� � d Z ddlZddlmZ ddlmZ ddlmZmZ ddl m Z ddl m Z ddl mZ ej e� � Zd ed ed efd �Zd ededededef d�Z G d� de� � ZdS )u This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see <https://www.gnu.org/licenses/>. Copyright © 2019 Cloud Linux Software Inc. This software is also available under ImunifyAV commercial license, see <https://www.imunify360.com/legal/eula> � N��Path)� HookEvent)� MessageSink�expect)�MalwareScanType)� panel_users)�notifier�event_id�user�bodyc � � K � t j | ||� � � d {V �� d S # t $ r'}t � d| |� � Y d }~d S d }~ww xY w)Nz#Failed to trigger an event '%s': %r)r � trigger_event� Exception�logger�error)r r r �es �M/opt/imunify360/venv/lib/python3.11/site-packages/imav/plugins/event_hooks.pyr r " s� � � � �I��$�X�t�T�:�:�:�:�:�:�:�:�:�:�:�� � I� I� I�� � �:�H�a�H�H�H�H�H�H�H�H�H�����I���s � " � A� A�A�path�scan_id� scan_type�custom_event_id� user_event_idc � � � K � |t j k rd}|}nM|t j t j fv r1t � fd�t � � � d {V ��D � � d� � }|}nd S t |||� d�|�� � � d {V �� d S )N� c 3 �t �K � | ]2}t �� � t |d � � k �(|d V � �3dS )�homer Nr )�.0�ur s �r � <genexpr>z%trigger_scan_event.<locals>.<genexpr>6 sN �� � � � � ����:�:��a��i� � �0�0� �&� �0�0�0�0� � � )r r )r � ON_DEMAND� BACKGROUND�USER�nextr r )r r r r r �kwargsr r s ` r �trigger_scan_eventr' ) s� �� � � � �O�-�-�-���"��� ��1�?�3G�H� H� H�� � � � � *�}�}�,�,�,�,�,�,� � � � � � �� !����� �� ��T�4�4�V�4� � � � � � � � � � � r! c � � e Zd Zd� Z eej � � d� � � Z eej � � d� � � Z eej � � d� � � Z dS )� EventHooksc � � K � || _ d S )N)�_loop)�self�loops r � create_sinkzEventHooks.create_sinkI s � � � ��� � � r! c � � K � |d }|t j k r t j }n)|t j t j fv r t j }nd S d� |d D � � }|D ]!}t ||d|d i� � � d {V �� �"d S )Nr c � � h | ] }|d �� S )�username� )r �hits r � <setcomp>z+EventHooks.malware_found.<locals>.<setcomp>W s � �:�:�:�S��Z� �:�:�:r! �DUMPr )r r" r �"CUSTOM_SCAN_MALWARE_FOUND_EVENT_IDr# r$ � USER_SCAN_MALWARE_FOUND_EVENT_IDr )r, �eventr r �usersr s r � malware_foundzEventHooks.malware_foundL s� � � � ��+�&� � ��1� 1� 1� �B�H�H� �?�5��7K�L� L� L� �@�H�H� �F�:�:�E�&�M�:�:�:��� O� O�D� ��$��E�)�<L�0M�N�N� N� N� N� N� N� N� N� N� O� Or! c � � K � t |d |d |d t j t j |d �� � � d {V �� d S )Nr r r �started)r< )r' r � CUSTOM_SCAN_STARTED_EVENT_ID�USER_SCAN_STARTED_EVENT_ID�r, r8 s r � scan_startedzEventHooks.scan_started[ sp � � � � � �&�M� �)� � �+� � � 1� � /��)�$� � � � � � � � � � � � r! c � � K � t |d |d |d t j t j � � � d {V �� d S )Nr r r )r' r � CUSTOM_SCAN_FINISHED_EVENT_ID�USER_SCAN_FINISHED_EVENT_IDr? s r � scan_finishedzEventHooks.scan_finishedf sc � � � � � �&�M� �)� � �+� � � 2� � 0� � � � � � � � � � � r! N) �__name__� __module__� __qualname__r. r r �MalwareDetectedCriticalr: �MalwareScanningStartedr@ �MalwareScanningFinishedrD r2 r! r r) r) H s� � � � � � �� � � �V�I� -�.�.� O� O� /�.� O� �V�I� ,�-�-� � � .�-� � �V�I� -�.�.� � � /�.� � � r! r) )�__doc__�logging�pathlibr �%defence360agent.contracts.hook_eventsr �!defence360agent.contracts.pluginsr r �imav.malwarelib.configr � imav.malwarelib.utils.user_listr �defence360agent.subsysr � getLoggerrE r �str�dictr r' r) r2 r! r �<module>rV sD ��� �* ���� � � � � � � ;� ;� ;� ;� ;� ;� A� A� A� A� A� A� A� A� 2� 2� 2� 2� 2� 2� 7� 7� 7� 7� 7� 7� +� +� +� +� +� +� �� �8� $� $��I�#� I�S� I�� I� I� I� I� � � � � � � � � � � � � � �>& � & � & � & � & �� & � & � & � & � & r!