secure-scan 1.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +564 -0
- package/dist/ai/aiAnalyzer.d.ts +99 -0
- package/dist/ai/aiAnalyzer.d.ts.map +1 -0
- package/dist/ai/aiAnalyzer.js +669 -0
- package/dist/ai/aiAnalyzer.js.map +1 -0
- package/dist/ai/index.d.ts +5 -0
- package/dist/ai/index.d.ts.map +1 -0
- package/dist/ai/index.js +21 -0
- package/dist/ai/index.js.map +1 -0
- package/dist/analyzers/base/baseAnalyzer.d.ts +44 -0
- package/dist/analyzers/base/baseAnalyzer.d.ts.map +1 -0
- package/dist/analyzers/base/baseAnalyzer.js +53 -0
- package/dist/analyzers/base/baseAnalyzer.js.map +1 -0
- package/dist/analyzers/base/index.d.ts +5 -0
- package/dist/analyzers/base/index.d.ts.map +1 -0
- package/dist/analyzers/base/index.js +21 -0
- package/dist/analyzers/base/index.js.map +1 -0
- package/dist/analyzers/c-cpp/cppAnalyzer.d.ts +60 -0
- package/dist/analyzers/c-cpp/cppAnalyzer.d.ts.map +1 -0
- package/dist/analyzers/c-cpp/cppAnalyzer.js +218 -0
- package/dist/analyzers/c-cpp/cppAnalyzer.js.map +1 -0
- package/dist/analyzers/c-cpp/index.d.ts +5 -0
- package/dist/analyzers/c-cpp/index.d.ts.map +1 -0
- package/dist/analyzers/c-cpp/index.js +21 -0
- package/dist/analyzers/c-cpp/index.js.map +1 -0
- package/dist/analyzers/core/engine/index.d.ts +5 -0
- package/dist/analyzers/core/engine/index.d.ts.map +1 -0
- package/dist/analyzers/core/engine/index.js +21 -0
- package/dist/analyzers/core/engine/index.js.map +1 -0
- package/dist/analyzers/core/engine/ruleEngine.d.ts +46 -0
- package/dist/analyzers/core/engine/ruleEngine.d.ts.map +1 -0
- package/dist/analyzers/core/engine/ruleEngine.js +173 -0
- package/dist/analyzers/core/engine/ruleEngine.js.map +1 -0
- package/dist/analyzers/core/index.d.ts +8 -0
- package/dist/analyzers/core/index.d.ts.map +1 -0
- package/dist/analyzers/core/index.js +24 -0
- package/dist/analyzers/core/index.js.map +1 -0
- package/dist/analyzers/core/scanner/fileScanner.d.ts +31 -0
- package/dist/analyzers/core/scanner/fileScanner.d.ts.map +1 -0
- package/dist/analyzers/core/scanner/fileScanner.js +199 -0
- package/dist/analyzers/core/scanner/fileScanner.js.map +1 -0
- package/dist/analyzers/core/scanner/index.d.ts +5 -0
- package/dist/analyzers/core/scanner/index.d.ts.map +1 -0
- package/dist/analyzers/core/scanner/index.js +21 -0
- package/dist/analyzers/core/scanner/index.js.map +1 -0
- package/dist/analyzers/core/scoring/index.d.ts +5 -0
- package/dist/analyzers/core/scoring/index.d.ts.map +1 -0
- package/dist/analyzers/core/scoring/index.js +21 -0
- package/dist/analyzers/core/scoring/index.js.map +1 -0
- package/dist/analyzers/core/scoring/riskScoring.d.ts +49 -0
- package/dist/analyzers/core/scoring/riskScoring.d.ts.map +1 -0
- package/dist/analyzers/core/scoring/riskScoring.js +180 -0
- package/dist/analyzers/core/scoring/riskScoring.js.map +1 -0
- package/dist/analyzers/core/securityScanner.d.ts +47 -0
- package/dist/analyzers/core/securityScanner.d.ts.map +1 -0
- package/dist/analyzers/core/securityScanner.js +298 -0
- package/dist/analyzers/core/securityScanner.js.map +1 -0
- package/dist/analyzers/csharp/csharpAnalyzer.d.ts +64 -0
- package/dist/analyzers/csharp/csharpAnalyzer.d.ts.map +1 -0
- package/dist/analyzers/csharp/csharpAnalyzer.js +232 -0
- package/dist/analyzers/csharp/csharpAnalyzer.js.map +1 -0
- package/dist/analyzers/csharp/index.d.ts +5 -0
- package/dist/analyzers/csharp/index.d.ts.map +1 -0
- package/dist/analyzers/csharp/index.js +21 -0
- package/dist/analyzers/csharp/index.js.map +1 -0
- package/dist/analyzers/iac/iacAnalyzer.d.ts +36 -0
- package/dist/analyzers/iac/iacAnalyzer.d.ts.map +1 -0
- package/dist/analyzers/iac/iacAnalyzer.js +182 -0
- package/dist/analyzers/iac/iacAnalyzer.js.map +1 -0
- package/dist/analyzers/iac/index.d.ts +5 -0
- package/dist/analyzers/iac/index.d.ts.map +1 -0
- package/dist/analyzers/iac/index.js +21 -0
- package/dist/analyzers/iac/index.js.map +1 -0
- package/dist/analyzers/index.d.ts +30 -0
- package/dist/analyzers/index.d.ts.map +1 -0
- package/dist/analyzers/index.js +80 -0
- package/dist/analyzers/index.js.map +1 -0
- package/dist/analyzers/java/index.d.ts +5 -0
- package/dist/analyzers/java/index.d.ts.map +1 -0
- package/dist/analyzers/java/index.js +21 -0
- package/dist/analyzers/java/index.js.map +1 -0
- package/dist/analyzers/java/javaAnalyzer.d.ts +64 -0
- package/dist/analyzers/java/javaAnalyzer.d.ts.map +1 -0
- package/dist/analyzers/java/javaAnalyzer.js +224 -0
- package/dist/analyzers/java/javaAnalyzer.js.map +1 -0
- package/dist/analyzers/javascript/astUtils.d.ts +170 -0
- package/dist/analyzers/javascript/astUtils.d.ts.map +1 -0
- package/dist/analyzers/javascript/astUtils.js +700 -0
- package/dist/analyzers/javascript/astUtils.js.map +1 -0
- package/dist/analyzers/javascript/index.d.ts +18 -0
- package/dist/analyzers/javascript/index.d.ts.map +1 -0
- package/dist/analyzers/javascript/index.js +50 -0
- package/dist/analyzers/javascript/index.js.map +1 -0
- package/dist/analyzers/javascript/javascriptAnalyzer.d.ts +111 -0
- package/dist/analyzers/javascript/javascriptAnalyzer.d.ts.map +1 -0
- package/dist/analyzers/javascript/javascriptAnalyzer.js +860 -0
- package/dist/analyzers/javascript/javascriptAnalyzer.js.map +1 -0
- package/dist/analyzers/javascript/malwareDetector.d.ts +102 -0
- package/dist/analyzers/javascript/malwareDetector.d.ts.map +1 -0
- package/dist/analyzers/javascript/malwareDetector.js +616 -0
- package/dist/analyzers/javascript/malwareDetector.js.map +1 -0
- package/dist/analyzers/javascript/packageJsonAnalyzer.d.ts +87 -0
- package/dist/analyzers/javascript/packageJsonAnalyzer.d.ts.map +1 -0
- package/dist/analyzers/javascript/packageJsonAnalyzer.js +553 -0
- package/dist/analyzers/javascript/packageJsonAnalyzer.js.map +1 -0
- package/dist/analyzers/javascript/taintAnalyzer.d.ts +120 -0
- package/dist/analyzers/javascript/taintAnalyzer.d.ts.map +1 -0
- package/dist/analyzers/javascript/taintAnalyzer.js +526 -0
- package/dist/analyzers/javascript/taintAnalyzer.js.map +1 -0
- package/dist/analyzers/php/index.d.ts +5 -0
- package/dist/analyzers/php/index.d.ts.map +1 -0
- package/dist/analyzers/php/index.js +21 -0
- package/dist/analyzers/php/index.js.map +1 -0
- package/dist/analyzers/php/phpAnalyzer.d.ts +56 -0
- package/dist/analyzers/php/phpAnalyzer.d.ts.map +1 -0
- package/dist/analyzers/php/phpAnalyzer.js +202 -0
- package/dist/analyzers/php/phpAnalyzer.js.map +1 -0
- package/dist/analyzers/python/index.d.ts +5 -0
- package/dist/analyzers/python/index.d.ts.map +1 -0
- package/dist/analyzers/python/index.js +21 -0
- package/dist/analyzers/python/index.js.map +1 -0
- package/dist/analyzers/python/pythonAnalyzer.d.ts +64 -0
- package/dist/analyzers/python/pythonAnalyzer.d.ts.map +1 -0
- package/dist/analyzers/python/pythonAnalyzer.js +226 -0
- package/dist/analyzers/python/pythonAnalyzer.js.map +1 -0
- package/dist/cli/index.d.ts +7 -0
- package/dist/cli/index.d.ts.map +1 -0
- package/dist/cli/index.js +281 -0
- package/dist/cli/index.js.map +1 -0
- package/dist/core/engine/index.d.ts +5 -0
- package/dist/core/engine/index.d.ts.map +1 -0
- package/dist/core/engine/index.js +21 -0
- package/dist/core/engine/index.js.map +1 -0
- package/dist/core/engine/ruleEngine.d.ts +46 -0
- package/dist/core/engine/ruleEngine.d.ts.map +1 -0
- package/dist/core/engine/ruleEngine.js +173 -0
- package/dist/core/engine/ruleEngine.js.map +1 -0
- package/dist/core/index.d.ts +8 -0
- package/dist/core/index.d.ts.map +1 -0
- package/dist/core/index.js +24 -0
- package/dist/core/index.js.map +1 -0
- package/dist/core/scanner/fileScanner.d.ts +31 -0
- package/dist/core/scanner/fileScanner.d.ts.map +1 -0
- package/dist/core/scanner/fileScanner.js +199 -0
- package/dist/core/scanner/fileScanner.js.map +1 -0
- package/dist/core/scanner/index.d.ts +5 -0
- package/dist/core/scanner/index.d.ts.map +1 -0
- package/dist/core/scanner/index.js +21 -0
- package/dist/core/scanner/index.js.map +1 -0
- package/dist/core/scoring/index.d.ts +5 -0
- package/dist/core/scoring/index.d.ts.map +1 -0
- package/dist/core/scoring/index.js +21 -0
- package/dist/core/scoring/index.js.map +1 -0
- package/dist/core/scoring/riskScoring.d.ts +49 -0
- package/dist/core/scoring/riskScoring.d.ts.map +1 -0
- package/dist/core/scoring/riskScoring.js +180 -0
- package/dist/core/scoring/riskScoring.js.map +1 -0
- package/dist/core/securityScanner.d.ts +47 -0
- package/dist/core/securityScanner.d.ts.map +1 -0
- package/dist/core/securityScanner.js +298 -0
- package/dist/core/securityScanner.js.map +1 -0
- package/dist/dependencies/aiDependencyAnalyzer.d.ts +96 -0
- package/dist/dependencies/aiDependencyAnalyzer.d.ts.map +1 -0
- package/dist/dependencies/aiDependencyAnalyzer.js +435 -0
- package/dist/dependencies/aiDependencyAnalyzer.js.map +1 -0
- package/dist/dependencies/database/cveDatabase.d.ts +32 -0
- package/dist/dependencies/database/cveDatabase.d.ts.map +1 -0
- package/dist/dependencies/database/cveDatabase.js +393 -0
- package/dist/dependencies/database/cveDatabase.js.map +1 -0
- package/dist/dependencies/database/index.d.ts +6 -0
- package/dist/dependencies/database/index.d.ts.map +1 -0
- package/dist/dependencies/database/index.js +22 -0
- package/dist/dependencies/database/index.js.map +1 -0
- package/dist/dependencies/database/maliciousPackages.d.ts +43 -0
- package/dist/dependencies/database/maliciousPackages.d.ts.map +1 -0
- package/dist/dependencies/database/maliciousPackages.js +279 -0
- package/dist/dependencies/database/maliciousPackages.js.map +1 -0
- package/dist/dependencies/dependencyAnalyzer.d.ts +74 -0
- package/dist/dependencies/dependencyAnalyzer.d.ts.map +1 -0
- package/dist/dependencies/dependencyAnalyzer.js +349 -0
- package/dist/dependencies/dependencyAnalyzer.js.map +1 -0
- package/dist/dependencies/detectors/index.d.ts +7 -0
- package/dist/dependencies/detectors/index.d.ts.map +1 -0
- package/dist/dependencies/detectors/index.js +28 -0
- package/dist/dependencies/detectors/index.js.map +1 -0
- package/dist/dependencies/detectors/securityStandards.d.ts +15 -0
- package/dist/dependencies/detectors/securityStandards.d.ts.map +1 -0
- package/dist/dependencies/detectors/securityStandards.js +178 -0
- package/dist/dependencies/detectors/securityStandards.js.map +1 -0
- package/dist/dependencies/detectors/vulnerabilityDetector.d.ts +53 -0
- package/dist/dependencies/detectors/vulnerabilityDetector.d.ts.map +1 -0
- package/dist/dependencies/detectors/vulnerabilityDetector.js +289 -0
- package/dist/dependencies/detectors/vulnerabilityDetector.js.map +1 -0
- package/dist/dependencies/index.d.ts +14 -0
- package/dist/dependencies/index.d.ts.map +1 -0
- package/dist/dependencies/index.js +43 -0
- package/dist/dependencies/index.js.map +1 -0
- package/dist/dependencies/installed/index.d.ts +8 -0
- package/dist/dependencies/installed/index.d.ts.map +1 -0
- package/dist/dependencies/installed/index.js +24 -0
- package/dist/dependencies/installed/index.js.map +1 -0
- package/dist/dependencies/installed/installedScanner.d.ts +91 -0
- package/dist/dependencies/installed/installedScanner.d.ts.map +1 -0
- package/dist/dependencies/installed/installedScanner.js +766 -0
- package/dist/dependencies/installed/installedScanner.js.map +1 -0
- package/dist/dependencies/installed/malwarePatterns.d.ts +32 -0
- package/dist/dependencies/installed/malwarePatterns.d.ts.map +1 -0
- package/dist/dependencies/installed/malwarePatterns.js +480 -0
- package/dist/dependencies/installed/malwarePatterns.js.map +1 -0
- package/dist/dependencies/installed/types.d.ts +274 -0
- package/dist/dependencies/installed/types.d.ts.map +1 -0
- package/dist/dependencies/installed/types.js +7 -0
- package/dist/dependencies/installed/types.js.map +1 -0
- package/dist/dependencies/parsers/base/baseParser.d.ts +44 -0
- package/dist/dependencies/parsers/base/baseParser.d.ts.map +1 -0
- package/dist/dependencies/parsers/base/baseParser.js +80 -0
- package/dist/dependencies/parsers/base/baseParser.js.map +1 -0
- package/dist/dependencies/parsers/base/index.d.ts +6 -0
- package/dist/dependencies/parsers/base/index.d.ts.map +1 -0
- package/dist/dependencies/parsers/base/index.js +27 -0
- package/dist/dependencies/parsers/base/index.js.map +1 -0
- package/dist/dependencies/parsers/cpp/cppParser.d.ts +36 -0
- package/dist/dependencies/parsers/cpp/cppParser.d.ts.map +1 -0
- package/dist/dependencies/parsers/cpp/cppParser.js +196 -0
- package/dist/dependencies/parsers/cpp/cppParser.js.map +1 -0
- package/dist/dependencies/parsers/cpp/index.d.ts +6 -0
- package/dist/dependencies/parsers/cpp/index.d.ts.map +1 -0
- package/dist/dependencies/parsers/cpp/index.js +27 -0
- package/dist/dependencies/parsers/cpp/index.js.map +1 -0
- package/dist/dependencies/parsers/csharp/csharpParser.d.ts +32 -0
- package/dist/dependencies/parsers/csharp/csharpParser.d.ts.map +1 -0
- package/dist/dependencies/parsers/csharp/csharpParser.js +125 -0
- package/dist/dependencies/parsers/csharp/csharpParser.js.map +1 -0
- package/dist/dependencies/parsers/csharp/index.d.ts +6 -0
- package/dist/dependencies/parsers/csharp/index.d.ts.map +1 -0
- package/dist/dependencies/parsers/csharp/index.js +27 -0
- package/dist/dependencies/parsers/csharp/index.js.map +1 -0
- package/dist/dependencies/parsers/index.d.ts +24 -0
- package/dist/dependencies/parsers/index.d.ts.map +1 -0
- package/dist/dependencies/parsers/index.js +69 -0
- package/dist/dependencies/parsers/index.js.map +1 -0
- package/dist/dependencies/parsers/java/index.d.ts +6 -0
- package/dist/dependencies/parsers/java/index.d.ts.map +1 -0
- package/dist/dependencies/parsers/java/index.js +27 -0
- package/dist/dependencies/parsers/java/index.js.map +1 -0
- package/dist/dependencies/parsers/java/javaParser.d.ts +32 -0
- package/dist/dependencies/parsers/java/javaParser.d.ts.map +1 -0
- package/dist/dependencies/parsers/java/javaParser.js +168 -0
- package/dist/dependencies/parsers/java/javaParser.js.map +1 -0
- package/dist/dependencies/parsers/javascript/index.d.ts +6 -0
- package/dist/dependencies/parsers/javascript/index.d.ts.map +1 -0
- package/dist/dependencies/parsers/javascript/index.js +27 -0
- package/dist/dependencies/parsers/javascript/index.js.map +1 -0
- package/dist/dependencies/parsers/javascript/javascriptParser.d.ts +55 -0
- package/dist/dependencies/parsers/javascript/javascriptParser.d.ts.map +1 -0
- package/dist/dependencies/parsers/javascript/javascriptParser.js +266 -0
- package/dist/dependencies/parsers/javascript/javascriptParser.js.map +1 -0
- package/dist/dependencies/parsers/php/index.d.ts +6 -0
- package/dist/dependencies/parsers/php/index.d.ts.map +1 -0
- package/dist/dependencies/parsers/php/index.js +27 -0
- package/dist/dependencies/parsers/php/index.js.map +1 -0
- package/dist/dependencies/parsers/php/phpParser.d.ts +35 -0
- package/dist/dependencies/parsers/php/phpParser.d.ts.map +1 -0
- package/dist/dependencies/parsers/php/phpParser.js +162 -0
- package/dist/dependencies/parsers/php/phpParser.js.map +1 -0
- package/dist/dependencies/parsers/python/index.d.ts +6 -0
- package/dist/dependencies/parsers/python/index.d.ts.map +1 -0
- package/dist/dependencies/parsers/python/index.js +27 -0
- package/dist/dependencies/parsers/python/index.js.map +1 -0
- package/dist/dependencies/parsers/python/pythonParser.d.ts +60 -0
- package/dist/dependencies/parsers/python/pythonParser.d.ts.map +1 -0
- package/dist/dependencies/parsers/python/pythonParser.js +336 -0
- package/dist/dependencies/parsers/python/pythonParser.js.map +1 -0
- package/dist/dependencies/types.d.ts +280 -0
- package/dist/dependencies/types.d.ts.map +1 -0
- package/dist/dependencies/types.js +59 -0
- package/dist/dependencies/types.js.map +1 -0
- package/dist/i18n/index.d.ts +2 -0
- package/dist/i18n/index.d.ts.map +1 -0
- package/dist/i18n/index.js +18 -0
- package/dist/i18n/index.js.map +1 -0
- package/dist/i18n/translations.d.ts +55 -0
- package/dist/i18n/translations.d.ts.map +1 -0
- package/dist/i18n/translations.js +119 -0
- package/dist/i18n/translations.js.map +1 -0
- package/dist/index.d.ts +14 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +36 -0
- package/dist/index.js.map +1 -0
- package/dist/reports/dependencyReportGenerator.d.ts +20 -0
- package/dist/reports/dependencyReportGenerator.d.ts.map +1 -0
- package/dist/reports/dependencyReportGenerator.js +690 -0
- package/dist/reports/dependencyReportGenerator.js.map +1 -0
- package/dist/reports/htmlReportGenerator.d.ts +43 -0
- package/dist/reports/htmlReportGenerator.d.ts.map +1 -0
- package/dist/reports/htmlReportGenerator.js +793 -0
- package/dist/reports/htmlReportGenerator.js.map +1 -0
- package/dist/reports/index.d.ts +7 -0
- package/dist/reports/index.d.ts.map +1 -0
- package/dist/reports/index.js +23 -0
- package/dist/reports/index.js.map +1 -0
- package/dist/reports/installedDepsReportGenerator.d.ts +14 -0
- package/dist/reports/installedDepsReportGenerator.d.ts.map +1 -0
- package/dist/reports/installedDepsReportGenerator.js +872 -0
- package/dist/reports/installedDepsReportGenerator.js.map +1 -0
- package/dist/rules/index.d.ts +31 -0
- package/dist/rules/index.d.ts.map +1 -0
- package/dist/rules/index.js +95 -0
- package/dist/rules/index.js.map +1 -0
- package/dist/rules/malware/categories/backdoors.d.ts +12 -0
- package/dist/rules/malware/categories/backdoors.d.ts.map +1 -0
- package/dist/rules/malware/categories/backdoors.js +163 -0
- package/dist/rules/malware/categories/backdoors.js.map +1 -0
- package/dist/rules/malware/categories/cryptominers.d.ts +13 -0
- package/dist/rules/malware/categories/cryptominers.d.ts.map +1 -0
- package/dist/rules/malware/categories/cryptominers.js +415 -0
- package/dist/rules/malware/categories/cryptominers.js.map +1 -0
- package/dist/rules/malware/categories/exfiltration.d.ts +20 -0
- package/dist/rules/malware/categories/exfiltration.d.ts.map +1 -0
- package/dist/rules/malware/categories/exfiltration.js +658 -0
- package/dist/rules/malware/categories/exfiltration.js.map +1 -0
- package/dist/rules/malware/categories/keyloggers.d.ts +19 -0
- package/dist/rules/malware/categories/keyloggers.d.ts.map +1 -0
- package/dist/rules/malware/categories/keyloggers.js +763 -0
- package/dist/rules/malware/categories/keyloggers.js.map +1 -0
- package/dist/rules/malware/categories/loaders.d.ts +20 -0
- package/dist/rules/malware/categories/loaders.d.ts.map +1 -0
- package/dist/rules/malware/categories/loaders.js +702 -0
- package/dist/rules/malware/categories/loaders.js.map +1 -0
- package/dist/rules/malware/categories/network.d.ts +19 -0
- package/dist/rules/malware/categories/network.d.ts.map +1 -0
- package/dist/rules/malware/categories/network.js +622 -0
- package/dist/rules/malware/categories/network.js.map +1 -0
- package/dist/rules/malware/categories/obfuscation.d.ts +22 -0
- package/dist/rules/malware/categories/obfuscation.d.ts.map +1 -0
- package/dist/rules/malware/categories/obfuscation.js +766 -0
- package/dist/rules/malware/categories/obfuscation.js.map +1 -0
- package/dist/rules/malware/constants/index.d.ts +281 -0
- package/dist/rules/malware/constants/index.d.ts.map +1 -0
- package/dist/rules/malware/constants/index.js +327 -0
- package/dist/rules/malware/constants/index.js.map +1 -0
- package/dist/rules/malware/engine/index.d.ts +178 -0
- package/dist/rules/malware/engine/index.d.ts.map +1 -0
- package/dist/rules/malware/engine/index.js +552 -0
- package/dist/rules/malware/engine/index.js.map +1 -0
- package/dist/rules/malware/index.d.ts +205 -0
- package/dist/rules/malware/index.d.ts.map +1 -0
- package/dist/rules/malware/index.js +837 -0
- package/dist/rules/malware/index.js.map +1 -0
- package/dist/rules/malware/scoring/index.d.ts +84 -0
- package/dist/rules/malware/scoring/index.d.ts.map +1 -0
- package/dist/rules/malware/scoring/index.js +441 -0
- package/dist/rules/malware/scoring/index.js.map +1 -0
- package/dist/rules/malware/types/index.d.ts +616 -0
- package/dist/rules/malware/types/index.d.ts.map +1 -0
- package/dist/rules/malware/types/index.js +155 -0
- package/dist/rules/malware/types/index.js.map +1 -0
- package/dist/rules/malware/utils/index.d.ts +117 -0
- package/dist/rules/malware/utils/index.d.ts.map +1 -0
- package/dist/rules/malware/utils/index.js +514 -0
- package/dist/rules/malware/utils/index.js.map +1 -0
- package/dist/rules/standards.d.ts +26 -0
- package/dist/rules/standards.d.ts.map +1 -0
- package/dist/rules/standards.js +352 -0
- package/dist/rules/standards.js.map +1 -0
- package/dist/rules/vulnerabilities/constants/index.d.ts +835 -0
- package/dist/rules/vulnerabilities/constants/index.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/constants/index.js +544 -0
- package/dist/rules/vulnerabilities/constants/index.js.map +1 -0
- package/dist/rules/vulnerabilities/engine/index.d.ts +145 -0
- package/dist/rules/vulnerabilities/engine/index.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/engine/index.js +581 -0
- package/dist/rules/vulnerabilities/engine/index.js.map +1 -0
- package/dist/rules/vulnerabilities/index.d.ts +148 -0
- package/dist/rules/vulnerabilities/index.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/index.js +252 -0
- package/dist/rules/vulnerabilities/index.js.map +1 -0
- package/dist/rules/vulnerabilities/rules/authentication.d.ts +8 -0
- package/dist/rules/vulnerabilities/rules/authentication.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/rules/authentication.js +419 -0
- package/dist/rules/vulnerabilities/rules/authentication.js.map +1 -0
- package/dist/rules/vulnerabilities/rules/commandInjection.d.ts +8 -0
- package/dist/rules/vulnerabilities/rules/commandInjection.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/rules/commandInjection.js +300 -0
- package/dist/rules/vulnerabilities/rules/commandInjection.js.map +1 -0
- package/dist/rules/vulnerabilities/rules/csrf.d.ts +8 -0
- package/dist/rules/vulnerabilities/rules/csrf.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/rules/csrf.js +261 -0
- package/dist/rules/vulnerabilities/rules/csrf.js.map +1 -0
- package/dist/rules/vulnerabilities/rules/deserialization.d.ts +8 -0
- package/dist/rules/vulnerabilities/rules/deserialization.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/rules/deserialization.js +336 -0
- package/dist/rules/vulnerabilities/rules/deserialization.js.map +1 -0
- package/dist/rules/vulnerabilities/rules/fileUpload.d.ts +8 -0
- package/dist/rules/vulnerabilities/rules/fileUpload.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/rules/fileUpload.js +325 -0
- package/dist/rules/vulnerabilities/rules/fileUpload.js.map +1 -0
- package/dist/rules/vulnerabilities/rules/hardcodedSecrets.d.ts +8 -0
- package/dist/rules/vulnerabilities/rules/hardcodedSecrets.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/rules/hardcodedSecrets.js +446 -0
- package/dist/rules/vulnerabilities/rules/hardcodedSecrets.js.map +1 -0
- package/dist/rules/vulnerabilities/rules/index.d.ts +17 -0
- package/dist/rules/vulnerabilities/rules/index.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/rules/index.js +47 -0
- package/dist/rules/vulnerabilities/rules/index.js.map +1 -0
- package/dist/rules/vulnerabilities/rules/pathTraversal.d.ts +8 -0
- package/dist/rules/vulnerabilities/rules/pathTraversal.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/rules/pathTraversal.js +351 -0
- package/dist/rules/vulnerabilities/rules/pathTraversal.js.map +1 -0
- package/dist/rules/vulnerabilities/rules/prototypePollution.d.ts +8 -0
- package/dist/rules/vulnerabilities/rules/prototypePollution.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/rules/prototypePollution.js +272 -0
- package/dist/rules/vulnerabilities/rules/prototypePollution.js.map +1 -0
- package/dist/rules/vulnerabilities/rules/securityMisconfiguration.d.ts +8 -0
- package/dist/rules/vulnerabilities/rules/securityMisconfiguration.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/rules/securityMisconfiguration.js +438 -0
- package/dist/rules/vulnerabilities/rules/securityMisconfiguration.js.map +1 -0
- package/dist/rules/vulnerabilities/rules/sqlInjection.d.ts +12 -0
- package/dist/rules/vulnerabilities/rules/sqlInjection.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/rules/sqlInjection.js +636 -0
- package/dist/rules/vulnerabilities/rules/sqlInjection.js.map +1 -0
- package/dist/rules/vulnerabilities/rules/ssrf.d.ts +8 -0
- package/dist/rules/vulnerabilities/rules/ssrf.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/rules/ssrf.js +401 -0
- package/dist/rules/vulnerabilities/rules/ssrf.js.map +1 -0
- package/dist/rules/vulnerabilities/rules/xss.d.ts +11 -0
- package/dist/rules/vulnerabilities/rules/xss.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/rules/xss.js +724 -0
- package/dist/rules/vulnerabilities/rules/xss.js.map +1 -0
- package/dist/rules/vulnerabilities/scoring/index.d.ts +80 -0
- package/dist/rules/vulnerabilities/scoring/index.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/scoring/index.js +414 -0
- package/dist/rules/vulnerabilities/scoring/index.js.map +1 -0
- package/dist/rules/vulnerabilities/types/index.d.ts +830 -0
- package/dist/rules/vulnerabilities/types/index.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/types/index.js +164 -0
- package/dist/rules/vulnerabilities/types/index.js.map +1 -0
- package/dist/rules/vulnerabilities/utils/index.d.ts +206 -0
- package/dist/rules/vulnerabilities/utils/index.d.ts.map +1 -0
- package/dist/rules/vulnerabilities/utils/index.js +615 -0
- package/dist/rules/vulnerabilities/utils/index.js.map +1 -0
- package/dist/types/index.d.ts +359 -0
- package/dist/types/index.d.ts.map +1 -0
- package/dist/types/index.js +61 -0
- package/dist/types/index.js.map +1 -0
- package/dist/utils/index.d.ts +82 -0
- package/dist/utils/index.d.ts.map +1 -0
- package/dist/utils/index.js +326 -0
- package/dist/utils/index.js.map +1 -0
- package/dist/utils/logger.d.ts +40 -0
- package/dist/utils/logger.d.ts.map +1 -0
- package/dist/utils/logger.js +139 -0
- package/dist/utils/logger.js.map +1 -0
- package/docs/ARCHITECTURE.md +320 -0
- package/docs/V1.2.1-IA_Performances.md +116 -0
- package/docs/images/WIN_Defender.png +0 -0
- package/package.json +68 -0
- package/secure-scan.config.json +134 -0
- package/secure-scan.sln +29 -0
- package/src/ai/aiAnalyzer.ts +714 -0
- package/src/ai/index.ts +5 -0
- package/src/analyzers/base/baseAnalyzer.ts +66 -0
- package/src/analyzers/base/index.ts +5 -0
- package/src/analyzers/c-cpp/cppAnalyzer.ts +308 -0
- package/src/analyzers/c-cpp/index.ts +5 -0
- package/src/analyzers/core/engine/index.ts +5 -0
- package/src/analyzers/core/engine/ruleEngine.ts +221 -0
- package/src/analyzers/core/index.ts +8 -0
- package/src/analyzers/core/scanner/fileScanner.ts +204 -0
- package/src/analyzers/core/scanner/index.ts +5 -0
- package/src/analyzers/core/scoring/index.ts +5 -0
- package/src/analyzers/core/scoring/riskScoring.ts +198 -0
- package/src/analyzers/core/securityScanner.ts +321 -0
- package/src/analyzers/csharp/csharpAnalyzer.ts +328 -0
- package/src/analyzers/csharp/index.ts +5 -0
- package/src/analyzers/iac/iacAnalyzer.ts +318 -0
- package/src/analyzers/iac/index.ts +5 -0
- package/src/analyzers/index.ts +67 -0
- package/src/analyzers/java/index.ts +5 -0
- package/src/analyzers/java/javaAnalyzer.ts +320 -0
- package/src/analyzers/javascript/PROMPT_JS_ANALYZER.md +267 -0
- package/src/analyzers/javascript/astUtils.ts +789 -0
- package/src/analyzers/javascript/index.ts +50 -0
- package/src/analyzers/javascript/javascriptAnalyzer.ts +984 -0
- package/src/analyzers/javascript/malwareDetector.ts +697 -0
- package/src/analyzers/javascript/packageJsonAnalyzer.ts +626 -0
- package/src/analyzers/javascript/taintAnalyzer.ts +630 -0
- package/src/analyzers/php/index.ts +5 -0
- package/src/analyzers/php/phpAnalyzer.ts +280 -0
- package/src/analyzers/python/index.ts +5 -0
- package/src/analyzers/python/pythonAnalyzer.ts +319 -0
- package/src/cli/index.ts +276 -0
- package/src/dependencies/aiDependencyAnalyzer.ts +496 -0
- package/src/dependencies/database/cveDatabase.ts +426 -0
- package/src/dependencies/database/index.ts +6 -0
- package/src/dependencies/database/maliciousPackages.ts +286 -0
- package/src/dependencies/dependencyAnalyzer.ts +394 -0
- package/src/dependencies/detectors/index.ts +7 -0
- package/src/dependencies/detectors/securityStandards.ts +200 -0
- package/src/dependencies/detectors/vulnerabilityDetector.ts +343 -0
- package/src/dependencies/index.ts +27 -0
- package/src/dependencies/installed/index.ts +8 -0
- package/src/dependencies/installed/installedScanner.ts +821 -0
- package/src/dependencies/installed/malwarePatterns.ts +492 -0
- package/src/dependencies/installed/types.ts +287 -0
- package/src/dependencies/parsers/base/baseParser.ts +108 -0
- package/src/dependencies/parsers/base/index.ts +6 -0
- package/src/dependencies/parsers/cpp/cppParser.ts +245 -0
- package/src/dependencies/parsers/cpp/index.ts +6 -0
- package/src/dependencies/parsers/csharp/csharpParser.ts +151 -0
- package/src/dependencies/parsers/csharp/index.ts +6 -0
- package/src/dependencies/parsers/index.ts +56 -0
- package/src/dependencies/parsers/java/index.ts +6 -0
- package/src/dependencies/parsers/java/javaParser.ts +203 -0
- package/src/dependencies/parsers/javascript/index.ts +6 -0
- package/src/dependencies/parsers/javascript/javascriptParser.ts +362 -0
- package/src/dependencies/parsers/php/index.ts +6 -0
- package/src/dependencies/parsers/php/phpParser.ts +208 -0
- package/src/dependencies/parsers/python/index.ts +6 -0
- package/src/dependencies/parsers/python/pythonParser.ts +437 -0
- package/src/dependencies/types.ts +330 -0
- package/src/i18n/index.ts +1 -0
- package/src/i18n/translations.ts +194 -0
- package/src/index.ts +16 -0
- package/src/reports/dependencyReportGenerator.ts +717 -0
- package/src/reports/htmlReportGenerator.ts +781 -0
- package/src/reports/index.ts +7 -0
- package/src/reports/installedDepsReportGenerator.ts +899 -0
- package/src/rules/index.ts +58 -0
- package/src/rules/malware/INFO.md +287 -0
- package/src/rules/malware/categories/backdoors.ts +174 -0
- package/src/rules/malware/categories/cryptominers.ts +434 -0
- package/src/rules/malware/categories/exfiltration.ts +677 -0
- package/src/rules/malware/categories/keyloggers.ts +780 -0
- package/src/rules/malware/categories/loaders.ts +721 -0
- package/src/rules/malware/categories/network.ts +639 -0
- package/src/rules/malware/categories/obfuscation.ts +788 -0
- package/src/rules/malware/constants/index.ts +358 -0
- package/src/rules/malware/engine/index.ts +758 -0
- package/src/rules/malware/index.ts +928 -0
- package/src/rules/malware/scoring/index.ts +549 -0
- package/src/rules/malware/types/index.ts +752 -0
- package/src/rules/malware/utils/index.ts +643 -0
- package/src/rules/standards.ts +372 -0
- package/src/rules/vulnerabilities/PROMPT_VULNERABILITIES.md +226 -0
- package/src/rules/vulnerabilities/constants/index.ts +625 -0
- package/src/rules/vulnerabilities/engine/index.ts +831 -0
- package/src/rules/vulnerabilities/index.ts +312 -0
- package/src/rules/vulnerabilities/rules/authentication.ts +426 -0
- package/src/rules/vulnerabilities/rules/commandInjection.ts +307 -0
- package/src/rules/vulnerabilities/rules/csrf.ts +268 -0
- package/src/rules/vulnerabilities/rules/deserialization.ts +343 -0
- package/src/rules/vulnerabilities/rules/fileUpload.ts +332 -0
- package/src/rules/vulnerabilities/rules/hardcodedSecrets.ts +453 -0
- package/src/rules/vulnerabilities/rules/index.ts +17 -0
- package/src/rules/vulnerabilities/rules/pathTraversal.ts +358 -0
- package/src/rules/vulnerabilities/rules/prototypePollution.ts +279 -0
- package/src/rules/vulnerabilities/rules/securityMisconfiguration.ts +445 -0
- package/src/rules/vulnerabilities/rules/sqlInjection.ts +669 -0
- package/src/rules/vulnerabilities/rules/ssrf.ts +408 -0
- package/src/rules/vulnerabilities/rules/xss.ts +753 -0
- package/src/rules/vulnerabilities/scoring/index.ts +543 -0
- package/src/rules/vulnerabilities/types/index.ts +1004 -0
- package/src/rules/vulnerabilities/utils/index.ts +709 -0
- package/src/types/index.ts +391 -0
- package/src/utils/index.ts +306 -0
- package/src/utils/logger.ts +150 -0
- package/test-installed-scanner.ts +136 -0
- package/tsconfig.json +30 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"obfuscation.js","sourceRoot":"","sources":["../../../../src/rules/malware/categories/obfuscation.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAEH,oCAUkB;AAElB,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAElE,QAAA,sBAAsB,GAAkB;IACnD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,mCAAmC;QACzC,WAAW,EAAE,+EAA+E;QAC5F,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,yBAAiB,CAAC,eAAe;QAC7C,QAAQ,EAAE,uBAAe,CAAC,WAAW;QACrC,SAAS,EAAE;YACT,yBAAiB,CAAC,UAAU;YAC5B,yBAAiB,CAAC,UAAU;YAC5B,yBAAiB,CAAC,MAAM;YACxB,yBAAiB,CAAC,GAAG;SACtB;QACD,QAAQ,EAAE,uBAAe,CAAC,IAAI;QAC9B,UAAU,EAAE,uBAAe,CAAC,IAAI;QAChC,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,cAAc;gBACzB,OAAO,EAAE,gEAAgE;gBACzE,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,wBAAwB;aACtC;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,kBAAkB;gBAC7B,OAAO,EAAE,2FAA2F;gBACpG,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,mCAAmC;aACjD;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE,kEAAkE;gBAC3E,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,0BAA0B;aACxC;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE,kFAAkF;gBAC3F,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,6BAA6B;aAC3C;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,0BAA0B;gBACrC,OAAO,EAAE,wDAAwD;gBACjE,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,kCAAkC;aAChD;SACF;QACD,kBAAkB,EAAE;YAClB;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE,gCAAgC;gBACzC,KAAK,EAAE,GAAG;gBACV,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,4BAA4B;aAC1C;SACF;QACD,iBAAiB,EAAE;YACjB;gBACE,IAAI,EAAE,iDAAiD;gBACvD,QAAQ,EAAE,yBAAiB,CAAC,UAAU;gBACtC,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,6BAA6B;aAC3C;YACD;gBACE,IAAI,EAAE,+DAA+D;gBACrE,QAAQ,EAAE,yBAAiB,CAAC,GAAG;gBAC/B,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,sBAAsB;aACpC;SACF;QACD,MAAM,EAAE;YACN,SAAS,EAAE,6CAA6C;YACxD,QAAQ,EAAE,sCAAsC;YAChD,cAAc,EAAE,CAAC,kBAAkB,CAAC;YACpC,UAAU,EAAE,CAAC,2BAA2B,CAAC;SAC1C;QACD,WAAW,EAAE;YACX,OAAO,EAAE,6DAA6D;YACtE,KAAK,EAAE;gBACL,sDAAsD;gBACtD,oDAAoD;gBACpD,4BAA4B;gBAC5B,iCAAiC;aAClC;SACF;QACD,WAAW,EAAE;YACX;gBACE,QAAQ,EAAE,mBAAW,CAAC,eAAe;gBACrC,UAAU,EAAE,iBAAiB;gBAC7B,WAAW,EAAE,OAAO;gBACpB,aAAa,EAAE,iCAAiC;gBAChD,GAAG,EAAE,4CAA4C;aAClD;YACD;gBACE,QAAQ,EAAE,mBAAW,CAAC,eAAe;gBACrC,UAAU,EAAE,iBAAiB;gBAC7B,WAAW,EAAE,OAAO;gBACpB,aAAa,EAAE,yCAAyC;gBACxD,GAAG,EAAE,4CAA4C;aAClD;SACF;QACD,IAAI,EAAE,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC;QAClD,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,wCAAwC;QAC9C,WAAW,EAAE,kEAAkE;QAC/E,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,yBAAiB,CAAC,eAAe;QAC7C,QAAQ,EAAE,uBAAe,CAAC,WAAW;QACrC,SAAS,EAAE,CAAC,yBAAiB,CAAC,GAAG,EAAE,yBAAiB,CAAC,UAAU,EAAE,yBAAiB,CAAC,MAAM,CAAC;QAC1F,QAAQ,EAAE,uBAAe,CAAC,IAAI;QAC9B,UAAU,EAAE,uBAAe,CAAC,IAAI;QAChC,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,kBAAkB;gBAC7B,OAAO,EAAE,iHAAiH;gBAC1H,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,+BAA+B;aAC7C;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE,6BAA6B;gBACtC,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,mBAAmB;aACjC;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,YAAY;gBACvB,OAAO,EAAE,6BAA6B;gBACtC,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,mBAAmB;aACjC;SACF;QACD,iBAAiB,EAAE;YACjB;gBACE,IAAI,EAAE,+DAA+D;gBACrE,QAAQ,EAAE,yBAAiB,CAAC,GAAG;gBAC/B,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,4BAA4B;aAC1C;SACF;QACD,MAAM,EAAE;YACN,SAAS,EAAE,oDAAoD;YAC/D,QAAQ,EAAE,mDAAmD;YAC7D,cAAc,EAAE,CAAC,kBAAkB,CAAC;YACpC,UAAU,EAAE,CAAC,oBAAoB,CAAC;SACnC;QACD,WAAW,EAAE;YACX,OAAO,EAAE,kDAAkD;YAC3D,KAAK,EAAE;gBACL,+BAA+B;gBAC/B,uBAAuB;gBACvB,uBAAuB;gBACvB,mCAAmC;aACpC;SACF;QACD,IAAI,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,CAAC;QAC3D,OAAO,EAAE,IAAI;KACd;CACF,CAAC;AAEF,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAElE,QAAA,sBAAsB,GAAkB;IACnD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EAAE,kEAAkE;QAC/E,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,yBAAiB,CAAC,eAAe;QAC7C,QAAQ,EAAE,uBAAe,CAAC,WAAW;QACrC,SAAS,EAAE,CAAC,yBAAiB,CAAC,UAAU,EAAE,yBAAiB,CAAC,UAAU,CAAC;QACvE,QAAQ,EAAE,uBAAe,CAAC,MAAM;QAChC,UAAU,EAAE,uBAAe,CAAC,MAAM;QAClC,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,aAAa;gBACxB,OAAO,EAAE,6CAA6C;gBACtD,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,sCAAsC;aACpD;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,aAAa;gBACxB,OAAO,EAAE,+EAA+E;gBACxF,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,2BAA2B;aACzC;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,eAAe;gBAC1B,OAAO,EAAE,2HAA2H;gBACpI,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,6BAA6B;aAC3C;SACF;QACD,iBAAiB,EAAE;YACjB;gBACE,IAAI,EAAE;8BACgB;gBACtB,QAAQ,EAAE,yBAAiB,CAAC,UAAU;gBACtC,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,uCAAuC;aACrD;SACF;QACD,MAAM,EAAE;YACN,SAAS,EAAE,oDAAoD;YAC/D,QAAQ,EAAE,8CAA8C;YACxD,cAAc,EAAE,CAAC,kBAAkB,CAAC;YACpC,UAAU,EAAE,CAAC,iCAAiC,CAAC;SAChD;QACD,WAAW,EAAE;YACX,OAAO,EAAE,yDAAyD;YAClE,KAAK,EAAE;gBACL,sCAAsC;gBACtC,2CAA2C;gBAC3C,qBAAqB;aACtB;SACF;QACD,IAAI,EAAE,CAAC,aAAa,EAAE,kBAAkB,EAAE,eAAe,CAAC;QAC1D,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,mCAAmC;QACzC,WAAW,EAAE,qEAAqE;QAClF,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,yBAAiB,CAAC,eAAe;QAC7C,QAAQ,EAAE,uBAAe,CAAC,WAAW;QACrC,SAAS,EAAE,CAAC,yBAAiB,CAAC,UAAU,EAAE,yBAAiB,CAAC,UAAU,CAAC;QACvE,QAAQ,EAAE,uBAAe,CAAC,IAAI;QAC9B,UAAU,EAAE,uBAAe,CAAC,IAAI;QAChC,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,mBAAmB;gBAC9B,OAAO,EAAE,0CAA0C;gBACnD,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,4BAA4B;aAC1C;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,mBAAmB;gBAC9B,OAAO,EAAE,uCAAuC;gBAChD,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,qBAAqB;aACnC;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,oBAAoB;gBAC/B,OAAO,EAAE,6DAA6D;gBACtE,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,6BAA6B;aAC3C;SACF;QACD,iBAAiB,EAAE;YACjB;gBACE,IAAI,EAAE,sFAAsF;gBAC5F,QAAQ,EAAE,yBAAiB,CAAC,UAAU;gBACtC,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,0BAA0B;aACxC;SACF;QACD,MAAM,EAAE;YACN,SAAS,EAAE,kDAAkD;YAC7D,QAAQ,EAAE,mDAAmD;YAC7D,cAAc,EAAE,CAAC,kBAAkB,CAAC;YACpC,UAAU,EAAE,CAAC,4BAA4B,CAAC;SAC3C;QACD,WAAW,EAAE;YACX,OAAO,EAAE,0DAA0D;YACnE,KAAK,EAAE;gBACL,yCAAyC;gBACzC,6BAA6B;gBAC7B,qBAAqB;aACtB;SACF;QACD,IAAI,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,UAAU,CAAC;QACjD,OAAO,EAAE,IAAI;KACd;CACF,CAAC;AAEF,+EAA+E;AAC/E,gCAAgC;AAChC,+EAA+E;AAElE,QAAA,eAAe,GAAkB;IAC5C;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,0CAA0C;QAChD,WAAW,EAAE,kFAAkF;QAC/F,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,yBAAiB,CAAC,eAAe;QAC7C,QAAQ,EAAE,uBAAe,CAAC,WAAW;QACrC,SAAS,EAAE,CAAC,yBAAiB,CAAC,UAAU,EAAE,yBAAiB,CAAC,UAAU,EAAE,yBAAiB,CAAC,MAAM,CAAC;QACjG,QAAQ,EAAE,uBAAe,CAAC,IAAI;QAC9B,UAAU,EAAE,uBAAe,CAAC,IAAI;QAChC,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,mBAAmB;gBAC9B,OAAO,EAAE,8BAA8B;gBACvC,KAAK,EAAE,GAAG;gBACV,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,8BAA8B;aAC5C;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,uBAAuB;gBAClC,OAAO,EAAE,8BAA8B;gBACvC,KAAK,EAAE,GAAG;gBACV,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,kCAAkC;aAChD;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,UAAU;gBACrB,OAAO,EAAE,uBAAuB;gBAChC,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,uBAAuB;aACrC;SACF;QACD,kBAAkB,EAAE;YAClB;gBACE,IAAI,EAAE,mBAAW,CAAC,SAAS;gBAC3B,SAAS,EAAE,cAAc;gBACzB,aAAa,EAAE,kBAAkB;gBACjC,SAAS,EAAE,GAAG;gBACd,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,sBAAsB;aACpC;SACF;QACD,iBAAiB,EAAE;YACjB;gBACE,IAAI,EAAE,sFAAsF;gBAC5F,QAAQ,EAAE,yBAAiB,CAAC,UAAU;gBACtC,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,0BAA0B;aACxC;SACF;QACD,MAAM,EAAE;YACN,SAAS,EAAE,iDAAiD;YAC5D,QAAQ,EAAE,6CAA6C;YACvD,cAAc,EAAE,CAAC,kBAAkB,CAAC;YACpC,UAAU,EAAE,CAAC,4BAA4B,CAAC;SAC3C;QACD,WAAW,EAAE;YACX,OAAO,EAAE,iDAAiD;YAC1D,KAAK,EAAE;gBACL,6BAA6B;gBAC7B,yBAAyB;gBACzB,qBAAqB;aACtB;SACF;QACD,IAAI,EAAE,CAAC,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC;QACnD,OAAO,EAAE,IAAI;KACd;CACF,CAAC;AAEF,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAElE,QAAA,oBAAoB,GAAkB;IACjD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,iCAAiC;QACvC,WAAW,EAAE,0EAA0E;QACvF,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,yBAAiB,CAAC,eAAe;QAC7C,QAAQ,EAAE,uBAAe,CAAC,WAAW;QACrC,SAAS,EAAE,CAAC,yBAAiB,CAAC,UAAU,EAAE,yBAAiB,CAAC,UAAU,CAAC;QACvE,QAAQ,EAAE,uBAAe,CAAC,IAAI;QAC9B,UAAU,EAAE,uBAAe,CAAC,SAAS;QACrC,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,qBAAqB;gBAChC,OAAO,EAAE,iGAAiG;gBAC1G,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,+BAA+B;aAC7C;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,cAAc;gBACzB,OAAO,EAAE,8DAA8D;gBACvE,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,sBAAsB;aACpC;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,mBAAmB;gBAC9B,OAAO,EAAE,2DAA2D;gBACpE,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,6BAA6B;aAC3C;SACF;QACD,iBAAiB,EAAE;YACjB;gBACE,IAAI,EAAE,4TAA4T;gBAClU,QAAQ,EAAE,yBAAiB,CAAC,UAAU;gBACtC,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,wBAAwB;aACtC;SACF;QACD,MAAM,EAAE;YACN,SAAS,EAAE,sDAAsD;YACjE,QAAQ,EAAE,8CAA8C;YACxD,cAAc,EAAE,CAAC,kBAAkB,CAAC;YACpC,UAAU,EAAE,CAAC,6BAA6B,CAAC;SAC5C;QACD,WAAW,EAAE;YACX,OAAO,EAAE,kDAAkD;YAC3D,KAAK,EAAE;gBACL,8CAA8C;gBAC9C,iDAAiD;gBACjD,oBAAoB;gBACpB,mCAAmC;aACpC;SACF;QACD,IAAI,EAAE,CAAC,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC;QACzD,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,sCAAsC;QAC5C,WAAW,EAAE,8DAA8D;QAC3E,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,yBAAiB,CAAC,eAAe;QAC7C,QAAQ,EAAE,uBAAe,CAAC,WAAW;QACrC,SAAS,EAAE,CAAC,yBAAiB,CAAC,UAAU,EAAE,yBAAiB,CAAC,UAAU,CAAC;QACvE,QAAQ,EAAE,uBAAe,CAAC,MAAM;QAChC,UAAU,EAAE,uBAAe,CAAC,IAAI;QAChC,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE,iBAAiB;gBAC1B,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,+BAA+B;aAC7C;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,kBAAkB;gBAC7B,OAAO,EAAE,iDAAiD;gBAC1D,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,4BAA4B;aAC1C;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,kBAAkB;gBAC7B,OAAO,EAAE,+CAA+C;gBACxD,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,yBAAyB;aACvC;SACF;QACD,iBAAiB,EAAE;YACjB;gBACE,IAAI,EAAE,yMAAyM;gBAC/M,QAAQ,EAAE,yBAAiB,CAAC,UAAU;gBACtC,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,uBAAuB;aACrC;SACF;QACD,qBAAqB,EAAE;YACrB;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,eAAe;gBAC1B,OAAO,EAAE,kCAAkC;gBAC3C,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,wCAAwC;aACtD;SACF;QACD,MAAM,EAAE;YACN,SAAS,EAAE,sCAAsC;YACjD,QAAQ,EAAE,kDAAkD;YAC5D,cAAc,EAAE,CAAC,kBAAkB,CAAC;YACpC,UAAU,EAAE,CAAC,iCAAiC,CAAC;SAChD;QACD,WAAW,EAAE;YACX,OAAO,EAAE,4CAA4C;YACrD,KAAK,EAAE;gBACL,yBAAyB;gBACzB,gCAAgC;gBAChC,qCAAqC;aACtC;SACF;QACD,IAAI,EAAE,CAAC,aAAa,EAAE,eAAe,EAAE,SAAS,CAAC;QACjD,OAAO,EAAE,IAAI;KACd;CACF,CAAC;AAEF,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAElE,QAAA,kBAAkB,GAAkB;IAC/C;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EAAE,uDAAuD;QACpE,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,yBAAiB,CAAC,cAAc;QAC5C,QAAQ,EAAE,uBAAe,CAAC,OAAO;QACjC,SAAS,EAAE,CAAC,yBAAiB,CAAC,UAAU,EAAE,yBAAiB,CAAC,UAAU,CAAC;QACvE,QAAQ,EAAE,uBAAe,CAAC,MAAM;QAChC,UAAU,EAAE,uBAAe,CAAC,MAAM;QAClC,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,oBAAoB;gBAC/B,OAAO,EAAE,qBAAqB;gBAC9B,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,oBAAoB;aAClC;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,gBAAgB;gBAC3B,OAAO,EAAE,uEAAuE;gBAChF,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,6BAA6B;aAC3C;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE,8CAA8C;gBACvD,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,4BAA4B;aAC1C;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,oBAAoB;gBAC/B,OAAO,EAAE,8EAA8E;gBACvF,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,mCAAmC;aACjD;SACF;QACD,iBAAiB,EAAE;YACjB;gBACE,IAAI,EAAE;;;;;;;;UAQJ;gBACF,QAAQ,EAAE,yBAAiB,CAAC,UAAU;gBACtC,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,2BAA2B;aACzC;SACF;QACD,qBAAqB,EAAE;YACrB;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE,gDAAgD;gBACzD,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,+BAA+B;aAC7C;SACF;QACD,MAAM,EAAE;YACN,SAAS,EAAE,2CAA2C;YACtD,QAAQ,EAAE,sDAAsD;YAChE,cAAc,EAAE,CAAC,sBAAsB,CAAC;YACxC,UAAU,EAAE,CAAC,qBAAqB,CAAC;SACpC;QACD,WAAW,EAAE;YACX,OAAO,EAAE,8DAA8D;YACvE,KAAK,EAAE;gBACL,gCAAgC;gBAChC,yCAAyC;gBACzC,wBAAwB;aACzB;SACF;QACD,IAAI,EAAE,CAAC,gBAAgB,EAAE,SAAS,EAAE,UAAU,CAAC;QAC/C,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,2CAA2C;QACjD,WAAW,EAAE,kDAAkD;QAC/D,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,yBAAiB,CAAC,cAAc;QAC5C,QAAQ,EAAE,uBAAe,CAAC,OAAO;QACjC,SAAS,EAAE,CAAC,yBAAiB,CAAC,UAAU,EAAE,yBAAiB,CAAC,UAAU,CAAC;QACvE,QAAQ,EAAE,uBAAe,CAAC,MAAM;QAChC,UAAU,EAAE,uBAAe,CAAC,MAAM;QAClC,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,gBAAgB;gBAC3B,OAAO,EAAE,2FAA2F;gBACpG,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,mCAAmC;aACjD;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,mBAAmB;gBAC9B,OAAO,EAAE,6CAA6C;gBACtD,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,6BAA6B;aAC3C;SACF;QACD,iBAAiB,EAAE;YACjB;gBACE,IAAI,EAAE;;EAEZ;gBACM,QAAQ,EAAE,yBAAiB,CAAC,UAAU;gBACtC,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,iCAAiC;aAC/C;SACF;QACD,MAAM,EAAE;YACN,SAAS,EAAE,+CAA+C;YAC1D,QAAQ,EAAE,0BAA0B;YACpC,cAAc,EAAE,CAAC,qBAAqB,CAAC;YACvC,UAAU,EAAE,CAAC,qBAAqB,CAAC;SACpC;QACD,WAAW,EAAE;YACX,OAAO,EAAE,mCAAmC;YAC5C,KAAK,EAAE;gBACL,uBAAuB;gBACvB,qBAAqB;aACtB;SACF;QACD,IAAI,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,SAAS,CAAC;QACtD,OAAO,EAAE,IAAI;KACd;CACF,CAAC;AAEF,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAElE,QAAA,aAAa,GAAkB;IAC1C;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,mCAAmC;QACzC,WAAW,EAAE,6DAA6D;QAC1E,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,yBAAiB,CAAC,eAAe;QAC7C,QAAQ,EAAE,uBAAe,CAAC,WAAW;QACrC,SAAS,EAAE,CAAC,yBAAiB,CAAC,UAAU,EAAE,yBAAiB,CAAC,UAAU,CAAC;QACvE,QAAQ,EAAE,uBAAe,CAAC,GAAG;QAC7B,UAAU,EAAE,uBAAe,CAAC,MAAM;QAClC,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,kBAAkB;gBAC7B,OAAO,EAAE,+BAA+B;gBACxC,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,6BAA6B;aAC3C;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,KAAK;gBACvB,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE,oDAAoD;gBAC7D,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,kCAAkC;aAChD;YACD;gBACE,IAAI,EAAE,mBAAW,CAAC,SAAS;gBAC3B,SAAS,EAAE,iBAAiB;gBAC5B,aAAa,EAAE,wBAAwB;gBACvC,SAAS,EAAE,GAAG;gBACd,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,sBAAsB;aACpC;SACF;QACD,MAAM,EAAE;YACN,SAAS,EAAE,0CAA0C;YACrD,QAAQ,EAAE,gDAAgD;YAC1D,cAAc,EAAE,CAAC,cAAc,CAAC;YAChC,UAAU,EAAE,CAAC,UAAU,CAAC;SACzB;QACD,WAAW,EAAE;YACX,OAAO,EAAE,uDAAuD;YAChE,KAAK,EAAE;gBACL,sCAAsC;gBACtC,+CAA+C;aAChD;SACF;QACD,IAAI,EAAE,CAAC,aAAa,EAAE,WAAW,EAAE,cAAc,CAAC;QAClD,OAAO,EAAE,IAAI;KACd;CACF,CAAC;AAEF,+EAA+E;AAC/E,+BAA+B;AAC/B,+EAA+E;AAElE,QAAA,gBAAgB,GAAkB;IAC7C,GAAG,8BAAsB;IACzB,GAAG,8BAAsB;IACzB,GAAG,uBAAe;IAClB,GAAG,4BAAoB;IACvB,GAAG,0BAAkB;IACrB,GAAG,qBAAa;CACjB,CAAC;AAEF,kBAAe,wBAAgB,CAAC"}
|
|
@@ -0,0 +1,281 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @fileoverview Malware Detection Constants
|
|
3
|
+
* @module rules/malware/constants
|
|
4
|
+
*
|
|
5
|
+
* Central repository for all constants used in malware detection.
|
|
6
|
+
*/
|
|
7
|
+
import { MalwareSeverity, ConfidenceLevel, MitreTactic } from '../types';
|
|
8
|
+
/**
|
|
9
|
+
* Score thresholds for severity calculation
|
|
10
|
+
*/
|
|
11
|
+
export declare const SCORE_THRESHOLDS: {
|
|
12
|
+
readonly CRITICAL: 85;
|
|
13
|
+
readonly HIGH: 65;
|
|
14
|
+
readonly MEDIUM: 40;
|
|
15
|
+
readonly LOW: 20;
|
|
16
|
+
readonly INFO: 0;
|
|
17
|
+
};
|
|
18
|
+
/**
|
|
19
|
+
* Risk level thresholds
|
|
20
|
+
*/
|
|
21
|
+
export declare const RISK_LEVELS: {
|
|
22
|
+
readonly CRITICAL: {
|
|
23
|
+
readonly min: 85;
|
|
24
|
+
readonly label: "critical";
|
|
25
|
+
};
|
|
26
|
+
readonly HIGH: {
|
|
27
|
+
readonly min: 65;
|
|
28
|
+
readonly label: "high";
|
|
29
|
+
};
|
|
30
|
+
readonly MEDIUM: {
|
|
31
|
+
readonly min: 40;
|
|
32
|
+
readonly label: "medium";
|
|
33
|
+
};
|
|
34
|
+
readonly LOW: {
|
|
35
|
+
readonly min: 20;
|
|
36
|
+
readonly label: "low";
|
|
37
|
+
};
|
|
38
|
+
readonly MINIMAL: {
|
|
39
|
+
readonly min: 0;
|
|
40
|
+
readonly label: "minimal";
|
|
41
|
+
};
|
|
42
|
+
};
|
|
43
|
+
/**
|
|
44
|
+
* Default scoring weights
|
|
45
|
+
*/
|
|
46
|
+
export declare const DEFAULT_SCORING_WEIGHTS: {
|
|
47
|
+
readonly patternCount: 0.25;
|
|
48
|
+
readonly obfuscation: 0.2;
|
|
49
|
+
readonly networkAccess: 0.15;
|
|
50
|
+
readonly commandExecution: 0.15;
|
|
51
|
+
readonly persistence: 0.15;
|
|
52
|
+
readonly dataAccess: 0.1;
|
|
53
|
+
};
|
|
54
|
+
/**
|
|
55
|
+
* Entropy thresholds for obfuscation detection
|
|
56
|
+
*/
|
|
57
|
+
export declare const ENTROPY_THRESHOLDS: {
|
|
58
|
+
readonly NORMAL: 4.5;
|
|
59
|
+
readonly SUSPICIOUS: 5.5;
|
|
60
|
+
readonly HIGH_OBFUSCATION: 6.5;
|
|
61
|
+
readonly BINARY_DATA: 7.5;
|
|
62
|
+
};
|
|
63
|
+
/**
|
|
64
|
+
* Performance and safety limits
|
|
65
|
+
*/
|
|
66
|
+
export declare const LIMITS: {
|
|
67
|
+
/** Maximum execution time for a single regex in ms */
|
|
68
|
+
readonly REGEX_TIMEOUT: 1000;
|
|
69
|
+
/** Maximum execution time for a single rule in ms */
|
|
70
|
+
readonly RULE_TIMEOUT: 5000;
|
|
71
|
+
/** Maximum execution time for a single file in ms */
|
|
72
|
+
readonly FILE_TIMEOUT: 30000;
|
|
73
|
+
/** Maximum matches per pattern before stopping */
|
|
74
|
+
readonly MAX_MATCHES_PER_PATTERN: 100;
|
|
75
|
+
/** Maximum findings per file */
|
|
76
|
+
readonly MAX_FINDINGS_PER_FILE: 500;
|
|
77
|
+
/** Maximum file size to analyze in bytes */
|
|
78
|
+
readonly MAX_FILE_SIZE: number;
|
|
79
|
+
/** Maximum pattern matches to store for a finding */
|
|
80
|
+
readonly MAX_PATTERN_MATCHES_PER_FINDING: 50;
|
|
81
|
+
/** Maximum code snippet length */
|
|
82
|
+
readonly MAX_SNIPPET_LENGTH: 500;
|
|
83
|
+
/** Lines of context before/after match */
|
|
84
|
+
readonly CONTEXT_LINES: 3;
|
|
85
|
+
};
|
|
86
|
+
/**
|
|
87
|
+
* Common obfuscation patterns and their weights
|
|
88
|
+
*/
|
|
89
|
+
export declare const OBFUSCATION_INDICATORS: {
|
|
90
|
+
/** Hex escape sequences */
|
|
91
|
+
readonly HEX_ESCAPES: {
|
|
92
|
+
readonly pattern: RegExp;
|
|
93
|
+
readonly weight: 0.1;
|
|
94
|
+
};
|
|
95
|
+
/** Unicode escape sequences */
|
|
96
|
+
readonly UNICODE_ESCAPES: {
|
|
97
|
+
readonly pattern: RegExp;
|
|
98
|
+
readonly weight: 0.1;
|
|
99
|
+
};
|
|
100
|
+
/** Long base64 strings */
|
|
101
|
+
readonly BASE64_STRINGS: {
|
|
102
|
+
readonly pattern: RegExp;
|
|
103
|
+
readonly weight: 0.15;
|
|
104
|
+
};
|
|
105
|
+
/** String concatenation obfuscation */
|
|
106
|
+
readonly STRING_CONCAT: {
|
|
107
|
+
readonly pattern: RegExp;
|
|
108
|
+
readonly weight: 0.2;
|
|
109
|
+
};
|
|
110
|
+
/** Array access obfuscation */
|
|
111
|
+
readonly ARRAY_ACCESS: {
|
|
112
|
+
readonly pattern: RegExp;
|
|
113
|
+
readonly weight: 0.05;
|
|
114
|
+
};
|
|
115
|
+
/** Obfuscator variable names */
|
|
116
|
+
readonly OBFUSCATOR_VARS: {
|
|
117
|
+
readonly pattern: RegExp;
|
|
118
|
+
readonly weight: 0.3;
|
|
119
|
+
};
|
|
120
|
+
/** JSFuck-style obfuscation */
|
|
121
|
+
readonly JSFUCK: {
|
|
122
|
+
readonly pattern: RegExp;
|
|
123
|
+
readonly weight: 0.4;
|
|
124
|
+
};
|
|
125
|
+
/** Long single-line functions */
|
|
126
|
+
readonly LONG_LINES: {
|
|
127
|
+
readonly threshold: 500;
|
|
128
|
+
readonly weight: 0.1;
|
|
129
|
+
};
|
|
130
|
+
/** High character diversity */
|
|
131
|
+
readonly CHAR_DIVERSITY: {
|
|
132
|
+
readonly threshold: 0.7;
|
|
133
|
+
readonly weight: 0.15;
|
|
134
|
+
};
|
|
135
|
+
};
|
|
136
|
+
/**
|
|
137
|
+
* Known malicious TLDs
|
|
138
|
+
*/
|
|
139
|
+
export declare const SUSPICIOUS_TLDS: readonly [".onion", ".bit", ".i2p", ".bazar", ".coin", ".lib", ".emc"];
|
|
140
|
+
/**
|
|
141
|
+
* Known malicious hosting services
|
|
142
|
+
*/
|
|
143
|
+
export declare const SUSPICIOUS_HOSTS: readonly ["pastebin.com", "hastebin.com", "ghostbin.com", "rentry.co", "dpaste.org", "ngrok.io", "serveo.net", "localhost.run", "localtunnel.me", "webhook.site", "requestbin.com", "pipedream.com"];
|
|
144
|
+
/**
|
|
145
|
+
* Private IP ranges (for reverse shell detection)
|
|
146
|
+
*/
|
|
147
|
+
export declare const PRIVATE_IP_RANGES: readonly [RegExp, RegExp, RegExp, RegExp];
|
|
148
|
+
/**
|
|
149
|
+
* Known cryptomining pools and software
|
|
150
|
+
*/
|
|
151
|
+
export declare const CRYPTO_INDICATORS: {
|
|
152
|
+
readonly POOLS: readonly ["pool.minergate.com", "xmr.pool.minergate.com", "pool.supportxmr.com", "xmr-eu1.nanopool.org", "monerohash.com", "minexmr.com", "pool.hashvault.pro", "gulf.moneroocean.stream"];
|
|
153
|
+
readonly SOFTWARE: readonly ["coinhive", "cryptoloot", "coin-hive", "coinimp", "cryptonight", "xmrig", "xmr-stak", "minerd", "cgminer", "bfgminer"];
|
|
154
|
+
readonly ALGORITHMS: readonly ["CryptoNight", "RandomX", "Ethash", "Scrypt", "SHA256d"];
|
|
155
|
+
readonly PROTOCOLS: readonly ["stratum+tcp://", "stratum+ssl://", "stratum2+tcp://"];
|
|
156
|
+
};
|
|
157
|
+
/**
|
|
158
|
+
* Dangerous shell commands
|
|
159
|
+
*/
|
|
160
|
+
export declare const DANGEROUS_COMMANDS: {
|
|
161
|
+
readonly SHELLS: readonly ["/bin/bash", "/bin/sh", "/bin/zsh", "cmd.exe", "powershell.exe"];
|
|
162
|
+
readonly NETCAT: readonly ["nc", "ncat", "netcat", "socat"];
|
|
163
|
+
readonly DOWNLOADERS: readonly ["curl", "wget", "Invoke-WebRequest", "certutil"];
|
|
164
|
+
readonly EXECUTION: readonly ["exec", "eval", "spawn", "fork", "CreateProcess"];
|
|
165
|
+
};
|
|
166
|
+
/**
|
|
167
|
+
* File patterns to ignore
|
|
168
|
+
*/
|
|
169
|
+
export declare const IGNORE_PATTERNS: {
|
|
170
|
+
readonly VENDOR: readonly [RegExp, RegExp, RegExp, RegExp, RegExp];
|
|
171
|
+
readonly BUILD: readonly [RegExp, RegExp, RegExp, RegExp, RegExp];
|
|
172
|
+
readonly TEST: readonly [RegExp, RegExp, RegExp, RegExp, RegExp];
|
|
173
|
+
readonly GENERATED: readonly [RegExp, RegExp, RegExp];
|
|
174
|
+
};
|
|
175
|
+
/**
|
|
176
|
+
* Map threat types to default severities
|
|
177
|
+
*/
|
|
178
|
+
export declare const THREAT_SEVERITY_MAP: Record<string, MalwareSeverity>;
|
|
179
|
+
/**
|
|
180
|
+
* Confidence boost based on pattern count
|
|
181
|
+
*/
|
|
182
|
+
export declare const PATTERN_COUNT_CONFIDENCE_BOOST: Record<number, ConfidenceLevel>;
|
|
183
|
+
/**
|
|
184
|
+
* Common MITRE ATT&CK technique mappings
|
|
185
|
+
*/
|
|
186
|
+
export declare const MITRE_TECHNIQUES: {
|
|
187
|
+
readonly COMMAND_LINE: {
|
|
188
|
+
readonly id: "T1059";
|
|
189
|
+
readonly name: "Command and Scripting Interpreter";
|
|
190
|
+
readonly tactic: MitreTactic.EXECUTION;
|
|
191
|
+
};
|
|
192
|
+
readonly JAVASCRIPT: {
|
|
193
|
+
readonly id: "T1059.007";
|
|
194
|
+
readonly name: "JavaScript";
|
|
195
|
+
readonly tactic: MitreTactic.EXECUTION;
|
|
196
|
+
};
|
|
197
|
+
readonly PYTHON: {
|
|
198
|
+
readonly id: "T1059.006";
|
|
199
|
+
readonly name: "Python";
|
|
200
|
+
readonly tactic: MitreTactic.EXECUTION;
|
|
201
|
+
};
|
|
202
|
+
readonly POWERSHELL: {
|
|
203
|
+
readonly id: "T1059.001";
|
|
204
|
+
readonly name: "PowerShell";
|
|
205
|
+
readonly tactic: MitreTactic.EXECUTION;
|
|
206
|
+
};
|
|
207
|
+
readonly WEB_SHELL: {
|
|
208
|
+
readonly id: "T1505.003";
|
|
209
|
+
readonly name: "Web Shell";
|
|
210
|
+
readonly tactic: MitreTactic.PERSISTENCE;
|
|
211
|
+
};
|
|
212
|
+
readonly SCHEDULED_TASK: {
|
|
213
|
+
readonly id: "T1053";
|
|
214
|
+
readonly name: "Scheduled Task/Job";
|
|
215
|
+
readonly tactic: MitreTactic.PERSISTENCE;
|
|
216
|
+
};
|
|
217
|
+
readonly KEYLOGGING: {
|
|
218
|
+
readonly id: "T1056.001";
|
|
219
|
+
readonly name: "Keylogging";
|
|
220
|
+
readonly tactic: MitreTactic.CREDENTIAL_ACCESS;
|
|
221
|
+
};
|
|
222
|
+
readonly CREDENTIAL_DUMPING: {
|
|
223
|
+
readonly id: "T1003";
|
|
224
|
+
readonly name: "OS Credential Dumping";
|
|
225
|
+
readonly tactic: MitreTactic.CREDENTIAL_ACCESS;
|
|
226
|
+
};
|
|
227
|
+
readonly OBFUSCATION: {
|
|
228
|
+
readonly id: "T1027";
|
|
229
|
+
readonly name: "Obfuscated Files or Information";
|
|
230
|
+
readonly tactic: MitreTactic.DEFENSE_EVASION;
|
|
231
|
+
};
|
|
232
|
+
readonly DEOBFUSCATE: {
|
|
233
|
+
readonly id: "T1140";
|
|
234
|
+
readonly name: "Deobfuscate/Decode Files or Information";
|
|
235
|
+
readonly tactic: MitreTactic.DEFENSE_EVASION;
|
|
236
|
+
};
|
|
237
|
+
readonly APP_LAYER: {
|
|
238
|
+
readonly id: "T1071";
|
|
239
|
+
readonly name: "Application Layer Protocol";
|
|
240
|
+
readonly tactic: MitreTactic.COMMAND_AND_CONTROL;
|
|
241
|
+
};
|
|
242
|
+
readonly INGRESS_TOOL: {
|
|
243
|
+
readonly id: "T1105";
|
|
244
|
+
readonly name: "Ingress Tool Transfer";
|
|
245
|
+
readonly tactic: MitreTactic.COMMAND_AND_CONTROL;
|
|
246
|
+
};
|
|
247
|
+
readonly EXFIL_WEB: {
|
|
248
|
+
readonly id: "T1041";
|
|
249
|
+
readonly name: "Exfiltration Over C2 Channel";
|
|
250
|
+
readonly tactic: MitreTactic.EXFILTRATION;
|
|
251
|
+
};
|
|
252
|
+
readonly RESOURCE_HIJACKING: {
|
|
253
|
+
readonly id: "T1496";
|
|
254
|
+
readonly name: "Resource Hijacking";
|
|
255
|
+
readonly tactic: MitreTactic.IMPACT;
|
|
256
|
+
};
|
|
257
|
+
};
|
|
258
|
+
/**
|
|
259
|
+
* Language-specific dangerous function patterns
|
|
260
|
+
*/
|
|
261
|
+
export declare const DANGEROUS_FUNCTIONS: {
|
|
262
|
+
readonly javascript: readonly ["eval", "Function", "setTimeout", "setInterval", "execScript"];
|
|
263
|
+
readonly typescript: readonly ["eval", "Function", "setTimeout", "setInterval"];
|
|
264
|
+
readonly python: readonly ["eval", "exec", "compile", "__import__", "execfile"];
|
|
265
|
+
readonly php: readonly ["eval", "exec", "system", "passthru", "shell_exec", "popen", "proc_open", "assert", "preg_replace"];
|
|
266
|
+
readonly ruby: readonly ["eval", "exec", "system", "`", "spawn", "Open3"];
|
|
267
|
+
readonly csharp: readonly ["Process.Start", "Assembly.Load", "Activator.CreateInstance"];
|
|
268
|
+
readonly java: readonly ["Runtime.exec", "ProcessBuilder", "ScriptEngine.eval"];
|
|
269
|
+
};
|
|
270
|
+
/**
|
|
271
|
+
* Language-specific network functions
|
|
272
|
+
*/
|
|
273
|
+
export declare const NETWORK_FUNCTIONS: {
|
|
274
|
+
readonly javascript: readonly ["fetch", "XMLHttpRequest", "axios", "request", "http.get", "https.get"];
|
|
275
|
+
readonly typescript: readonly ["fetch", "XMLHttpRequest", "axios", "request", "http.get", "https.get"];
|
|
276
|
+
readonly python: readonly ["urllib", "requests", "httplib", "socket", "http.client"];
|
|
277
|
+
readonly php: readonly ["file_get_contents", "curl_exec", "fopen", "fsockopen"];
|
|
278
|
+
readonly csharp: readonly ["HttpClient", "WebRequest", "WebClient", "TcpClient"];
|
|
279
|
+
readonly java: readonly ["HttpURLConnection", "URLConnection", "Socket", "HttpClient"];
|
|
280
|
+
};
|
|
281
|
+
//# sourceMappingURL=index.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/rules/malware/constants/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAMzE;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;CAMnB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;CAMd,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;CAO1B,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;CAKrB,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,MAAM;IACjB,sDAAsD;;IAEtD,qDAAqD;;IAErD,qDAAqD;;IAErD,kDAAkD;;IAElD,gCAAgC;;IAEhC,4CAA4C;;IAE5C,qDAAqD;;IAErD,kCAAkC;;IAElC,0CAA0C;;CAElC,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,sBAAsB;IACjC,2BAA2B;;;;;IAE3B,+BAA+B;;;;;IAE/B,0BAA0B;;;;;IAE1B,uCAAuC;;;;;IAEvC,+BAA+B;;;;;IAE/B,gCAAgC;;;;;IAEhC,+BAA+B;;;;;IAE/B,iCAAiC;;;;;IAEjC,+BAA+B;;;;;CAEvB,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,eAAe,wEAQlB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,gBAAgB,sMAanB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,iBAAiB,2CAKpB,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;CAmCpB,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;CAKrB,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;CA2BlB,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAkB/D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,8BAA8B,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAK1E,CAAC;AAMF;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BnB,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;CAQtB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;CAOpB,CAAC"}
|
|
@@ -0,0 +1,327 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
/**
|
|
3
|
+
* @fileoverview Malware Detection Constants
|
|
4
|
+
* @module rules/malware/constants
|
|
5
|
+
*
|
|
6
|
+
* Central repository for all constants used in malware detection.
|
|
7
|
+
*/
|
|
8
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
9
|
+
exports.NETWORK_FUNCTIONS = exports.DANGEROUS_FUNCTIONS = exports.MITRE_TECHNIQUES = exports.PATTERN_COUNT_CONFIDENCE_BOOST = exports.THREAT_SEVERITY_MAP = exports.IGNORE_PATTERNS = exports.DANGEROUS_COMMANDS = exports.CRYPTO_INDICATORS = exports.PRIVATE_IP_RANGES = exports.SUSPICIOUS_HOSTS = exports.SUSPICIOUS_TLDS = exports.OBFUSCATION_INDICATORS = exports.LIMITS = exports.ENTROPY_THRESHOLDS = exports.DEFAULT_SCORING_WEIGHTS = exports.RISK_LEVELS = exports.SCORE_THRESHOLDS = void 0;
|
|
10
|
+
const types_1 = require("../types");
|
|
11
|
+
// ============================================================================
|
|
12
|
+
// SCORING THRESHOLDS
|
|
13
|
+
// ============================================================================
|
|
14
|
+
/**
|
|
15
|
+
* Score thresholds for severity calculation
|
|
16
|
+
*/
|
|
17
|
+
exports.SCORE_THRESHOLDS = {
|
|
18
|
+
CRITICAL: 85,
|
|
19
|
+
HIGH: 65,
|
|
20
|
+
MEDIUM: 40,
|
|
21
|
+
LOW: 20,
|
|
22
|
+
INFO: 0
|
|
23
|
+
};
|
|
24
|
+
/**
|
|
25
|
+
* Risk level thresholds
|
|
26
|
+
*/
|
|
27
|
+
exports.RISK_LEVELS = {
|
|
28
|
+
CRITICAL: { min: 85, label: 'critical' },
|
|
29
|
+
HIGH: { min: 65, label: 'high' },
|
|
30
|
+
MEDIUM: { min: 40, label: 'medium' },
|
|
31
|
+
LOW: { min: 20, label: 'low' },
|
|
32
|
+
MINIMAL: { min: 0, label: 'minimal' }
|
|
33
|
+
};
|
|
34
|
+
/**
|
|
35
|
+
* Default scoring weights
|
|
36
|
+
*/
|
|
37
|
+
exports.DEFAULT_SCORING_WEIGHTS = {
|
|
38
|
+
patternCount: 0.25,
|
|
39
|
+
obfuscation: 0.20,
|
|
40
|
+
networkAccess: 0.15,
|
|
41
|
+
commandExecution: 0.15,
|
|
42
|
+
persistence: 0.15,
|
|
43
|
+
dataAccess: 0.10
|
|
44
|
+
};
|
|
45
|
+
// ============================================================================
|
|
46
|
+
// ENTROPY THRESHOLDS
|
|
47
|
+
// ============================================================================
|
|
48
|
+
/**
|
|
49
|
+
* Entropy thresholds for obfuscation detection
|
|
50
|
+
*/
|
|
51
|
+
exports.ENTROPY_THRESHOLDS = {
|
|
52
|
+
NORMAL: 4.5, // Normal code
|
|
53
|
+
SUSPICIOUS: 5.5, // Potentially obfuscated
|
|
54
|
+
HIGH_OBFUSCATION: 6.5, // Likely obfuscated
|
|
55
|
+
BINARY_DATA: 7.5 // Embedded binary/encrypted data
|
|
56
|
+
};
|
|
57
|
+
// ============================================================================
|
|
58
|
+
// PERFORMANCE LIMITS
|
|
59
|
+
// ============================================================================
|
|
60
|
+
/**
|
|
61
|
+
* Performance and safety limits
|
|
62
|
+
*/
|
|
63
|
+
exports.LIMITS = {
|
|
64
|
+
/** Maximum execution time for a single regex in ms */
|
|
65
|
+
REGEX_TIMEOUT: 1000,
|
|
66
|
+
/** Maximum execution time for a single rule in ms */
|
|
67
|
+
RULE_TIMEOUT: 5000,
|
|
68
|
+
/** Maximum execution time for a single file in ms */
|
|
69
|
+
FILE_TIMEOUT: 30000,
|
|
70
|
+
/** Maximum matches per pattern before stopping */
|
|
71
|
+
MAX_MATCHES_PER_PATTERN: 100,
|
|
72
|
+
/** Maximum findings per file */
|
|
73
|
+
MAX_FINDINGS_PER_FILE: 500,
|
|
74
|
+
/** Maximum file size to analyze in bytes */
|
|
75
|
+
MAX_FILE_SIZE: 10 * 1024 * 1024, // 10MB
|
|
76
|
+
/** Maximum pattern matches to store for a finding */
|
|
77
|
+
MAX_PATTERN_MATCHES_PER_FINDING: 50,
|
|
78
|
+
/** Maximum code snippet length */
|
|
79
|
+
MAX_SNIPPET_LENGTH: 500,
|
|
80
|
+
/** Lines of context before/after match */
|
|
81
|
+
CONTEXT_LINES: 3
|
|
82
|
+
};
|
|
83
|
+
// ============================================================================
|
|
84
|
+
// OBFUSCATION INDICATORS
|
|
85
|
+
// ============================================================================
|
|
86
|
+
/**
|
|
87
|
+
* Common obfuscation patterns and their weights
|
|
88
|
+
*/
|
|
89
|
+
exports.OBFUSCATION_INDICATORS = {
|
|
90
|
+
/** Hex escape sequences */
|
|
91
|
+
HEX_ESCAPES: { pattern: /\\x[0-9a-f]{2}/gi, weight: 0.1 },
|
|
92
|
+
/** Unicode escape sequences */
|
|
93
|
+
UNICODE_ESCAPES: { pattern: /\\u[0-9a-f]{4}/gi, weight: 0.1 },
|
|
94
|
+
/** Long base64 strings */
|
|
95
|
+
BASE64_STRINGS: { pattern: /[A-Za-z0-9+/]{50,}={0,2}/g, weight: 0.15 },
|
|
96
|
+
/** String concatenation obfuscation */
|
|
97
|
+
STRING_CONCAT: { pattern: /['"][a-z]['"](?:\s*\+\s*['"][a-z]['"]){3,}/gi, weight: 0.2 },
|
|
98
|
+
/** Array access obfuscation */
|
|
99
|
+
ARRAY_ACCESS: { pattern: /\[['"]\w+['"]\]/g, weight: 0.05 },
|
|
100
|
+
/** Obfuscator variable names */
|
|
101
|
+
OBFUSCATOR_VARS: { pattern: /_0x[a-f0-9]{4,}/gi, weight: 0.3 },
|
|
102
|
+
/** JSFuck-style obfuscation */
|
|
103
|
+
JSFUCK: { pattern: /\[\]!+/g, weight: 0.4 },
|
|
104
|
+
/** Long single-line functions */
|
|
105
|
+
LONG_LINES: { threshold: 500, weight: 0.1 },
|
|
106
|
+
/** High character diversity */
|
|
107
|
+
CHAR_DIVERSITY: { threshold: 0.7, weight: 0.15 }
|
|
108
|
+
};
|
|
109
|
+
// ============================================================================
|
|
110
|
+
// SUSPICIOUS DOMAINS & IPS
|
|
111
|
+
// ============================================================================
|
|
112
|
+
/**
|
|
113
|
+
* Known malicious TLDs
|
|
114
|
+
*/
|
|
115
|
+
exports.SUSPICIOUS_TLDS = [
|
|
116
|
+
'.onion',
|
|
117
|
+
'.bit',
|
|
118
|
+
'.i2p',
|
|
119
|
+
'.bazar',
|
|
120
|
+
'.coin',
|
|
121
|
+
'.lib',
|
|
122
|
+
'.emc'
|
|
123
|
+
];
|
|
124
|
+
/**
|
|
125
|
+
* Known malicious hosting services
|
|
126
|
+
*/
|
|
127
|
+
exports.SUSPICIOUS_HOSTS = [
|
|
128
|
+
'pastebin.com',
|
|
129
|
+
'hastebin.com',
|
|
130
|
+
'ghostbin.com',
|
|
131
|
+
'rentry.co',
|
|
132
|
+
'dpaste.org',
|
|
133
|
+
'ngrok.io',
|
|
134
|
+
'serveo.net',
|
|
135
|
+
'localhost.run',
|
|
136
|
+
'localtunnel.me',
|
|
137
|
+
'webhook.site',
|
|
138
|
+
'requestbin.com',
|
|
139
|
+
'pipedream.com'
|
|
140
|
+
];
|
|
141
|
+
/**
|
|
142
|
+
* Private IP ranges (for reverse shell detection)
|
|
143
|
+
*/
|
|
144
|
+
exports.PRIVATE_IP_RANGES = [
|
|
145
|
+
/^10\.\d{1,3}\.\d{1,3}\.\d{1,3}$/,
|
|
146
|
+
/^172\.(1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3}$/,
|
|
147
|
+
/^192\.168\.\d{1,3}\.\d{1,3}$/,
|
|
148
|
+
/^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/
|
|
149
|
+
];
|
|
150
|
+
// ============================================================================
|
|
151
|
+
// MINING INDICATORS
|
|
152
|
+
// ============================================================================
|
|
153
|
+
/**
|
|
154
|
+
* Known cryptomining pools and software
|
|
155
|
+
*/
|
|
156
|
+
exports.CRYPTO_INDICATORS = {
|
|
157
|
+
POOLS: [
|
|
158
|
+
'pool.minergate.com',
|
|
159
|
+
'xmr.pool.minergate.com',
|
|
160
|
+
'pool.supportxmr.com',
|
|
161
|
+
'xmr-eu1.nanopool.org',
|
|
162
|
+
'monerohash.com',
|
|
163
|
+
'minexmr.com',
|
|
164
|
+
'pool.hashvault.pro',
|
|
165
|
+
'gulf.moneroocean.stream'
|
|
166
|
+
],
|
|
167
|
+
SOFTWARE: [
|
|
168
|
+
'coinhive',
|
|
169
|
+
'cryptoloot',
|
|
170
|
+
'coin-hive',
|
|
171
|
+
'coinimp',
|
|
172
|
+
'cryptonight',
|
|
173
|
+
'xmrig',
|
|
174
|
+
'xmr-stak',
|
|
175
|
+
'minerd',
|
|
176
|
+
'cgminer',
|
|
177
|
+
'bfgminer'
|
|
178
|
+
],
|
|
179
|
+
ALGORITHMS: [
|
|
180
|
+
'CryptoNight',
|
|
181
|
+
'RandomX',
|
|
182
|
+
'Ethash',
|
|
183
|
+
'Scrypt',
|
|
184
|
+
'SHA256d'
|
|
185
|
+
],
|
|
186
|
+
PROTOCOLS: [
|
|
187
|
+
'stratum+tcp://',
|
|
188
|
+
'stratum+ssl://',
|
|
189
|
+
'stratum2+tcp://'
|
|
190
|
+
]
|
|
191
|
+
};
|
|
192
|
+
// ============================================================================
|
|
193
|
+
// SHELL COMMANDS
|
|
194
|
+
// ============================================================================
|
|
195
|
+
/**
|
|
196
|
+
* Dangerous shell commands
|
|
197
|
+
*/
|
|
198
|
+
exports.DANGEROUS_COMMANDS = {
|
|
199
|
+
SHELLS: ['/bin/bash', '/bin/sh', '/bin/zsh', 'cmd.exe', 'powershell.exe'],
|
|
200
|
+
NETCAT: ['nc', 'ncat', 'netcat', 'socat'],
|
|
201
|
+
DOWNLOADERS: ['curl', 'wget', 'Invoke-WebRequest', 'certutil'],
|
|
202
|
+
EXECUTION: ['exec', 'eval', 'spawn', 'fork', 'CreateProcess']
|
|
203
|
+
};
|
|
204
|
+
// ============================================================================
|
|
205
|
+
// FILE PATTERNS
|
|
206
|
+
// ============================================================================
|
|
207
|
+
/**
|
|
208
|
+
* File patterns to ignore
|
|
209
|
+
*/
|
|
210
|
+
exports.IGNORE_PATTERNS = {
|
|
211
|
+
VENDOR: [
|
|
212
|
+
/node_modules\//,
|
|
213
|
+
/vendor\//,
|
|
214
|
+
/bower_components\//,
|
|
215
|
+
/\.bundle\//,
|
|
216
|
+
/packages\//
|
|
217
|
+
],
|
|
218
|
+
BUILD: [
|
|
219
|
+
/dist\//,
|
|
220
|
+
/build\//,
|
|
221
|
+
/out\//,
|
|
222
|
+
/\.next\//,
|
|
223
|
+
/\.nuxt\//
|
|
224
|
+
],
|
|
225
|
+
TEST: [
|
|
226
|
+
/\.test\.[jt]sx?$/,
|
|
227
|
+
/\.spec\.[jt]sx?$/,
|
|
228
|
+
/__tests__\//,
|
|
229
|
+
/test\//,
|
|
230
|
+
/tests\//
|
|
231
|
+
],
|
|
232
|
+
GENERATED: [
|
|
233
|
+
/\.min\.[jt]s$/,
|
|
234
|
+
/\.bundle\.[jt]s$/,
|
|
235
|
+
/\.generated\./
|
|
236
|
+
]
|
|
237
|
+
};
|
|
238
|
+
// ============================================================================
|
|
239
|
+
// SEVERITY MAPPING
|
|
240
|
+
// ============================================================================
|
|
241
|
+
/**
|
|
242
|
+
* Map threat types to default severities
|
|
243
|
+
*/
|
|
244
|
+
exports.THREAT_SEVERITY_MAP = {
|
|
245
|
+
reverse_shell: types_1.MalwareSeverity.CRITICAL,
|
|
246
|
+
web_shell: types_1.MalwareSeverity.CRITICAL,
|
|
247
|
+
backdoor: types_1.MalwareSeverity.CRITICAL,
|
|
248
|
+
remote_access_trojan: types_1.MalwareSeverity.CRITICAL,
|
|
249
|
+
keylogger: types_1.MalwareSeverity.CRITICAL,
|
|
250
|
+
credential_stealer: types_1.MalwareSeverity.CRITICAL,
|
|
251
|
+
token_stealer: types_1.MalwareSeverity.HIGH,
|
|
252
|
+
data_exfiltration: types_1.MalwareSeverity.CRITICAL,
|
|
253
|
+
cryptominer: types_1.MalwareSeverity.HIGH,
|
|
254
|
+
dropper: types_1.MalwareSeverity.HIGH,
|
|
255
|
+
loader: types_1.MalwareSeverity.HIGH,
|
|
256
|
+
obfuscated_code: types_1.MalwareSeverity.MEDIUM,
|
|
257
|
+
c2_communication: types_1.MalwareSeverity.HIGH,
|
|
258
|
+
persistence: types_1.MalwareSeverity.HIGH,
|
|
259
|
+
fileless: types_1.MalwareSeverity.HIGH,
|
|
260
|
+
supply_chain: types_1.MalwareSeverity.CRITICAL,
|
|
261
|
+
suspicious_network: types_1.MalwareSeverity.MEDIUM
|
|
262
|
+
};
|
|
263
|
+
/**
|
|
264
|
+
* Confidence boost based on pattern count
|
|
265
|
+
*/
|
|
266
|
+
exports.PATTERN_COUNT_CONFIDENCE_BOOST = {
|
|
267
|
+
1: types_1.ConfidenceLevel.LOW,
|
|
268
|
+
2: types_1.ConfidenceLevel.MEDIUM,
|
|
269
|
+
3: types_1.ConfidenceLevel.HIGH,
|
|
270
|
+
5: types_1.ConfidenceLevel.CONFIRMED
|
|
271
|
+
};
|
|
272
|
+
// ============================================================================
|
|
273
|
+
// MITRE ATT&CK MAPPINGS
|
|
274
|
+
// ============================================================================
|
|
275
|
+
/**
|
|
276
|
+
* Common MITRE ATT&CK technique mappings
|
|
277
|
+
*/
|
|
278
|
+
exports.MITRE_TECHNIQUES = {
|
|
279
|
+
// Execution
|
|
280
|
+
COMMAND_LINE: { id: 'T1059', name: 'Command and Scripting Interpreter', tactic: types_1.MitreTactic.EXECUTION },
|
|
281
|
+
JAVASCRIPT: { id: 'T1059.007', name: 'JavaScript', tactic: types_1.MitreTactic.EXECUTION },
|
|
282
|
+
PYTHON: { id: 'T1059.006', name: 'Python', tactic: types_1.MitreTactic.EXECUTION },
|
|
283
|
+
POWERSHELL: { id: 'T1059.001', name: 'PowerShell', tactic: types_1.MitreTactic.EXECUTION },
|
|
284
|
+
// Persistence
|
|
285
|
+
WEB_SHELL: { id: 'T1505.003', name: 'Web Shell', tactic: types_1.MitreTactic.PERSISTENCE },
|
|
286
|
+
SCHEDULED_TASK: { id: 'T1053', name: 'Scheduled Task/Job', tactic: types_1.MitreTactic.PERSISTENCE },
|
|
287
|
+
// Credential Access
|
|
288
|
+
KEYLOGGING: { id: 'T1056.001', name: 'Keylogging', tactic: types_1.MitreTactic.CREDENTIAL_ACCESS },
|
|
289
|
+
CREDENTIAL_DUMPING: { id: 'T1003', name: 'OS Credential Dumping', tactic: types_1.MitreTactic.CREDENTIAL_ACCESS },
|
|
290
|
+
// Defense Evasion
|
|
291
|
+
OBFUSCATION: { id: 'T1027', name: 'Obfuscated Files or Information', tactic: types_1.MitreTactic.DEFENSE_EVASION },
|
|
292
|
+
DEOBFUSCATE: { id: 'T1140', name: 'Deobfuscate/Decode Files or Information', tactic: types_1.MitreTactic.DEFENSE_EVASION },
|
|
293
|
+
// Command and Control
|
|
294
|
+
APP_LAYER: { id: 'T1071', name: 'Application Layer Protocol', tactic: types_1.MitreTactic.COMMAND_AND_CONTROL },
|
|
295
|
+
INGRESS_TOOL: { id: 'T1105', name: 'Ingress Tool Transfer', tactic: types_1.MitreTactic.COMMAND_AND_CONTROL },
|
|
296
|
+
// Exfiltration
|
|
297
|
+
EXFIL_WEB: { id: 'T1041', name: 'Exfiltration Over C2 Channel', tactic: types_1.MitreTactic.EXFILTRATION },
|
|
298
|
+
// Impact
|
|
299
|
+
RESOURCE_HIJACKING: { id: 'T1496', name: 'Resource Hijacking', tactic: types_1.MitreTactic.IMPACT }
|
|
300
|
+
};
|
|
301
|
+
// ============================================================================
|
|
302
|
+
// LANGUAGE SPECIFIC PATTERNS
|
|
303
|
+
// ============================================================================
|
|
304
|
+
/**
|
|
305
|
+
* Language-specific dangerous function patterns
|
|
306
|
+
*/
|
|
307
|
+
exports.DANGEROUS_FUNCTIONS = {
|
|
308
|
+
javascript: ['eval', 'Function', 'setTimeout', 'setInterval', 'execScript'],
|
|
309
|
+
typescript: ['eval', 'Function', 'setTimeout', 'setInterval'],
|
|
310
|
+
python: ['eval', 'exec', 'compile', '__import__', 'execfile'],
|
|
311
|
+
php: ['eval', 'exec', 'system', 'passthru', 'shell_exec', 'popen', 'proc_open', 'assert', 'preg_replace'],
|
|
312
|
+
ruby: ['eval', 'exec', 'system', '`', 'spawn', 'Open3'],
|
|
313
|
+
csharp: ['Process.Start', 'Assembly.Load', 'Activator.CreateInstance'],
|
|
314
|
+
java: ['Runtime.exec', 'ProcessBuilder', 'ScriptEngine.eval']
|
|
315
|
+
};
|
|
316
|
+
/**
|
|
317
|
+
* Language-specific network functions
|
|
318
|
+
*/
|
|
319
|
+
exports.NETWORK_FUNCTIONS = {
|
|
320
|
+
javascript: ['fetch', 'XMLHttpRequest', 'axios', 'request', 'http.get', 'https.get'],
|
|
321
|
+
typescript: ['fetch', 'XMLHttpRequest', 'axios', 'request', 'http.get', 'https.get'],
|
|
322
|
+
python: ['urllib', 'requests', 'httplib', 'socket', 'http.client'],
|
|
323
|
+
php: ['file_get_contents', 'curl_exec', 'fopen', 'fsockopen'],
|
|
324
|
+
csharp: ['HttpClient', 'WebRequest', 'WebClient', 'TcpClient'],
|
|
325
|
+
java: ['HttpURLConnection', 'URLConnection', 'Socket', 'HttpClient']
|
|
326
|
+
};
|
|
327
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/rules/malware/constants/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,oCAAyE;AAEzE,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;GAEG;AACU,QAAA,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,EAAE;IACZ,IAAI,EAAE,EAAE;IACR,MAAM,EAAE,EAAE;IACV,GAAG,EAAE,EAAE;IACP,IAAI,EAAE,CAAC;CACC,CAAC;AAEX;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,UAAmB,EAAE;IACjD,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAe,EAAE;IACzC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,QAAiB,EAAE;IAC7C,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAc,EAAE;IACvC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,SAAkB,EAAE;CACtC,CAAC;AAEX;;GAEG;AACU,QAAA,uBAAuB,GAAG;IACrC,YAAY,EAAE,IAAI;IAClB,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,IAAI;IACnB,gBAAgB,EAAE,IAAI;IACtB,WAAW,EAAE,IAAI;IACjB,UAAU,EAAE,IAAI;CACR,CAAC;AAEX,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;GAEG;AACU,QAAA,kBAAkB,GAAG;IAChC,MAAM,EAAE,GAAG,EAAY,cAAc;IACrC,UAAU,EAAE,GAAG,EAAQ,yBAAyB;IAChD,gBAAgB,EAAE,GAAG,EAAE,oBAAoB;IAC3C,WAAW,EAAE,GAAG,CAAO,iCAAiC;CAChD,CAAC;AAEX,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;GAEG;AACU,QAAA,MAAM,GAAG;IACpB,sDAAsD;IACtD,aAAa,EAAE,IAAI;IACnB,qDAAqD;IACrD,YAAY,EAAE,IAAI;IAClB,qDAAqD;IACrD,YAAY,EAAE,KAAK;IACnB,kDAAkD;IAClD,uBAAuB,EAAE,GAAG;IAC5B,gCAAgC;IAChC,qBAAqB,EAAE,GAAG;IAC1B,4CAA4C;IAC5C,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;IACxC,qDAAqD;IACrD,+BAA+B,EAAE,EAAE;IACnC,kCAAkC;IAClC,kBAAkB,EAAE,GAAG;IACvB,0CAA0C;IAC1C,aAAa,EAAE,CAAC;CACR,CAAC;AAEX,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E;;GAEG;AACU,QAAA,sBAAsB,GAAG;IACpC,2BAA2B;IAC3B,WAAW,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,EAAE;IACzD,+BAA+B;IAC/B,eAAe,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,EAAE;IAC7D,0BAA0B;IAC1B,cAAc,EAAE,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,IAAI,EAAE;IACtE,uCAAuC;IACvC,aAAa,EAAE,EAAE,OAAO,EAAE,8CAA8C,EAAE,MAAM,EAAE,GAAG,EAAE;IACvF,+BAA+B;IAC/B,YAAY,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE;IAC3D,gCAAgC;IAChC,eAAe,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,EAAE;IAC9D,+BAA+B;IAC/B,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE;IAC3C,iCAAiC;IACjC,UAAU,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IAC3C,+BAA+B;IAC/B,cAAc,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;CACxC,CAAC;AAEX,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E;;GAEG;AACU,QAAA,eAAe,GAAG;IAC7B,QAAQ;IACR,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;IACN,MAAM;CACE,CAAC;AAEX;;GAEG;AACU,QAAA,gBAAgB,GAAG;IAC9B,cAAc;IACd,cAAc;IACd,cAAc;IACd,WAAW;IACX,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,eAAe;IACf,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,eAAe;CACP,CAAC;AAEX;;GAEG;AACU,QAAA,iBAAiB,GAAG;IAC/B,iCAAiC;IACjC,6CAA6C;IAC7C,8BAA8B;IAC9B,kCAAkC;CAC1B,CAAC;AAEX,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACU,QAAA,iBAAiB,GAAG;IAC/B,KAAK,EAAE;QACL,oBAAoB;QACpB,wBAAwB;QACxB,qBAAqB;QACrB,sBAAsB;QACtB,gBAAgB;QAChB,aAAa;QACb,oBAAoB;QACpB,yBAAyB;KAC1B;IACD,QAAQ,EAAE;QACR,UAAU;QACV,YAAY;QACZ,WAAW;QACX,SAAS;QACT,aAAa;QACb,OAAO;QACP,UAAU;QACV,QAAQ;QACR,SAAS;QACT,UAAU;KACX;IACD,UAAU,EAAE;QACV,aAAa;QACb,SAAS;QACT,QAAQ;QACR,QAAQ;QACR,SAAS;KACV;IACD,SAAS,EAAE;QACT,gBAAgB;QAChB,gBAAgB;QAChB,iBAAiB;KAClB;CACO,CAAC;AAEX,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;GAEG;AACU,QAAA,kBAAkB,GAAG;IAChC,MAAM,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAC;IACzE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;IACzC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,UAAU,CAAC;IAC9D,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC;CACrD,CAAC;AAEX,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E;;GAEG;AACU,QAAA,eAAe,GAAG;IAC7B,MAAM,EAAE;QACN,gBAAgB;QAChB,UAAU;QACV,oBAAoB;QACpB,YAAY;QACZ,YAAY;KACb;IACD,KAAK,EAAE;QACL,QAAQ;QACR,SAAS;QACT,OAAO;QACP,UAAU;QACV,UAAU;KACX;IACD,IAAI,EAAE;QACJ,kBAAkB;QAClB,kBAAkB;QAClB,aAAa;QACb,QAAQ;QACR,SAAS;KACV;IACD,SAAS,EAAE;QACT,eAAe;QACf,kBAAkB;QAClB,eAAe;KAChB;CACO,CAAC;AAEX,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACU,QAAA,mBAAmB,GAAoC;IAClE,aAAa,EAAE,uBAAe,CAAC,QAAQ;IACvC,SAAS,EAAE,uBAAe,CAAC,QAAQ;IACnC,QAAQ,EAAE,uBAAe,CAAC,QAAQ;IAClC,oBAAoB,EAAE,uBAAe,CAAC,QAAQ;IAC9C,SAAS,EAAE,uBAAe,CAAC,QAAQ;IACnC,kBAAkB,EAAE,uBAAe,CAAC,QAAQ;IAC5C,aAAa,EAAE,uBAAe,CAAC,IAAI;IACnC,iBAAiB,EAAE,uBAAe,CAAC,QAAQ;IAC3C,WAAW,EAAE,uBAAe,CAAC,IAAI;IACjC,OAAO,EAAE,uBAAe,CAAC,IAAI;IAC7B,MAAM,EAAE,uBAAe,CAAC,IAAI;IAC5B,eAAe,EAAE,uBAAe,CAAC,MAAM;IACvC,gBAAgB,EAAE,uBAAe,CAAC,IAAI;IACtC,WAAW,EAAE,uBAAe,CAAC,IAAI;IACjC,QAAQ,EAAE,uBAAe,CAAC,IAAI;IAC9B,YAAY,EAAE,uBAAe,CAAC,QAAQ;IACtC,kBAAkB,EAAE,uBAAe,CAAC,MAAM;CAC3C,CAAC;AAEF;;GAEG;AACU,QAAA,8BAA8B,GAAoC;IAC7E,CAAC,EAAE,uBAAe,CAAC,GAAG;IACtB,CAAC,EAAE,uBAAe,CAAC,MAAM;IACzB,CAAC,EAAE,uBAAe,CAAC,IAAI;IACvB,CAAC,EAAE,uBAAe,CAAC,SAAS;CAC7B,CAAC;AAEF,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;GAEG;AACU,QAAA,gBAAgB,GAAG;IAC9B,YAAY;IACZ,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,mCAAmC,EAAE,MAAM,EAAE,mBAAW,CAAC,SAAS,EAAE;IACvG,UAAU,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,mBAAW,CAAC,SAAS,EAAE;IAClF,MAAM,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAW,CAAC,SAAS,EAAE;IAC1E,UAAU,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,mBAAW,CAAC,SAAS,EAAE;IAElF,cAAc;IACd,SAAS,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,mBAAW,CAAC,WAAW,EAAE;IAClF,cAAc,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,mBAAW,CAAC,WAAW,EAAE;IAE5F,oBAAoB;IACpB,UAAU,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,mBAAW,CAAC,iBAAiB,EAAE;IAC1F,kBAAkB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,mBAAW,CAAC,iBAAiB,EAAE;IAEzG,kBAAkB;IAClB,WAAW,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,iCAAiC,EAAE,MAAM,EAAE,mBAAW,CAAC,eAAe,EAAE;IAC1G,WAAW,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,yCAAyC,EAAE,MAAM,EAAE,mBAAW,CAAC,eAAe,EAAE;IAElH,sBAAsB;IACtB,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,mBAAW,CAAC,mBAAmB,EAAE;IACvG,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,mBAAW,CAAC,mBAAmB,EAAE;IAErG,eAAe;IACf,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,8BAA8B,EAAE,MAAM,EAAE,mBAAW,CAAC,YAAY,EAAE;IAElG,SAAS;IACT,kBAAkB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,mBAAW,CAAC,MAAM,EAAE;CACnF,CAAC;AAEX,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E;;GAEG;AACU,QAAA,mBAAmB,GAAG;IACjC,UAAU,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,CAAC;IAC3E,UAAU,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,CAAC;IAC7D,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC;IAC7D,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,CAAC;IACzG,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC;IACvD,MAAM,EAAE,CAAC,eAAe,EAAE,eAAe,EAAE,0BAA0B,CAAC;IACtE,IAAI,EAAE,CAAC,cAAc,EAAE,gBAAgB,EAAE,mBAAmB,CAAC;CACrD,CAAC;AAEX;;GAEG;AACU,QAAA,iBAAiB,GAAG;IAC/B,UAAU,EAAE,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC;IACpF,UAAU,EAAE,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC;IACpF,MAAM,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC;IAClE,GAAG,EAAE,CAAC,mBAAmB,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC;IAC7D,MAAM,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC;IAC9D,IAAI,EAAE,CAAC,mBAAmB,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,CAAC;CAC5D,CAAC"}
|