c_meyer/KasperskyLab-TinyCheck
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Sandbox Process Creation

Browse Source
This commit is contained in:
pixeebot[bot]
2024-04-14 16:16:31 +00:00
committed by GitHub
parent 887e90cd06
commit 216db5d387
2 changed files with 23 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
analysis/classes/zeekengine.py
View File

@ -13,6 +13,7 @@ import os
import re
import sys
import whois
from security import safe_command
class ZeekEngine(object):
@ -445,9 +446,9 @@ class ZeekEngine(object):
"""
Start zeek and check the logs.
"""
sp.Popen("cd {} && /opt/zeek/bin/zeek -Cr capture.pcap protocols/ssl/validate-certs".format(
safe_command.run(sp.Popen, "cd {} && /opt/zeek/bin/zeek -Cr capture.pcap protocols/ssl/validate-certs".format(
self.working_dir), shell=False).wait()
sp.Popen("cd {} && mv *.log assets/".format(self.working_dir),
safe_command.run(sp.Popen, "cd {} && mv *.log assets/".format(self.working_dir),
shell=False).wait()
self.fill_dns(self.working_dir + "/assets/")
self.netflow_check(self.working_dir + "/assets/")