assemblyline-v4-service 4.4.1.dev79__py3-none-any.whl → 4.4.1.dev81__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of assemblyline-v4-service might be problematic. Click here for more details.
- assemblyline_v4_service/VERSION +1 -1
- assemblyline_v4_service/common/dynamic_service_helper.py +11 -5
- {assemblyline_v4_service-4.4.1.dev79.dist-info → assemblyline_v4_service-4.4.1.dev81.dist-info}/METADATA +1 -1
- {assemblyline_v4_service-4.4.1.dev79.dist-info → assemblyline_v4_service-4.4.1.dev81.dist-info}/RECORD +7 -7
- {assemblyline_v4_service-4.4.1.dev79.dist-info → assemblyline_v4_service-4.4.1.dev81.dist-info}/LICENCE.md +0 -0
- {assemblyline_v4_service-4.4.1.dev79.dist-info → assemblyline_v4_service-4.4.1.dev81.dist-info}/WHEEL +0 -0
- {assemblyline_v4_service-4.4.1.dev79.dist-info → assemblyline_v4_service-4.4.1.dev81.dist-info}/top_level.txt +0 -0
assemblyline_v4_service/VERSION
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
4.4.1.
|
|
1
|
+
4.4.1.dev81
|
|
@@ -19,11 +19,17 @@ from assemblyline.odm.models.ontology.results import NetworkConnection as Networ
|
|
|
19
19
|
from assemblyline.odm.models.ontology.results import Process as ProcessModel
|
|
20
20
|
from assemblyline.odm.models.ontology.results import Sandbox as SandboxModel
|
|
21
21
|
from assemblyline.odm.models.ontology.results import Signature as SignatureModel
|
|
22
|
+
|
|
22
23
|
# from assemblyline_v4_service.common.balbuzard.patterns import PatternMatch
|
|
23
24
|
from assemblyline_v4_service.common.base import ServiceBase
|
|
24
25
|
from assemblyline_v4_service.common.request import ServiceRequest
|
|
25
|
-
from assemblyline_v4_service.common.result import (
|
|
26
|
-
|
|
26
|
+
from assemblyline_v4_service.common.result import (
|
|
27
|
+
ProcessItem,
|
|
28
|
+
ResultProcessTreeSection,
|
|
29
|
+
ResultSection,
|
|
30
|
+
ResultTableSection,
|
|
31
|
+
TableRow,
|
|
32
|
+
)
|
|
27
33
|
from assemblyline_v4_service.common.safelist_helper import URL_REGEX, is_tag_safelisted
|
|
28
34
|
from assemblyline_v4_service.common.tag_helper import add_tag
|
|
29
35
|
from assemblyline_v4_service.common.task import MaxExtractedExceeded
|
|
@@ -3526,7 +3532,7 @@ def extract_iocs_from_text_blob(
|
|
|
3526
3532
|
# TODO: Are we missing IOCs to the point where we need a different regex?
|
|
3527
3533
|
# uris = {uri.decode() for uri in set(findall(PatternMatch.PAT_URI_NO_PROTOCOL, blob.encode()))} - domains - ips
|
|
3528
3534
|
uris = set(findall(URL_REGEX, blob)) - domains - ips
|
|
3529
|
-
for ip in ips:
|
|
3535
|
+
for ip in sorted(ips):
|
|
3530
3536
|
if add_tag(result_section, f"network.{network_tag_type}.ip", ip, safelist):
|
|
3531
3537
|
if not result_section.section_body.body:
|
|
3532
3538
|
result_section.add_row(TableRow(ioc_type="ip", ioc=ip))
|
|
@@ -3535,7 +3541,7 @@ def extract_iocs_from_text_blob(
|
|
|
3535
3541
|
not in result_section.section_body.body
|
|
3536
3542
|
):
|
|
3537
3543
|
result_section.add_row(TableRow(ioc_type="ip", ioc=ip))
|
|
3538
|
-
for domain in domains:
|
|
3544
|
+
for domain in sorted(domains):
|
|
3539
3545
|
if enforce_char_min and len(domain) < MIN_DOMAIN_CHARS:
|
|
3540
3546
|
continue
|
|
3541
3547
|
if enforce_domain_char_max and len(domain) > MAX_DOMAIN_CHARS:
|
|
@@ -3567,7 +3573,7 @@ def extract_iocs_from_text_blob(
|
|
|
3567
3573
|
):
|
|
3568
3574
|
result_section.add_row(TableRow(ioc_type="domain", ioc=domain))
|
|
3569
3575
|
|
|
3570
|
-
for uri in uris:
|
|
3576
|
+
for uri in sorted(uris):
|
|
3571
3577
|
if enforce_char_min and len(uri) < MIN_URI_CHARS:
|
|
3572
3578
|
continue
|
|
3573
3579
|
if any(invalid_uri_char in uri for invalid_uri_char in ['"', "'", '<', '>', "(", ")"]):
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
assemblyline_v4_service/VERSION,sha256=
|
|
1
|
+
assemblyline_v4_service/VERSION,sha256=lsRUmk04w_NFGdJDzfEXMuhZB97v5NQLX_WVLgezaS8,12
|
|
2
2
|
assemblyline_v4_service/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
3
3
|
assemblyline_v4_service/healthz.py,sha256=3QGBg0EZuXC6UN411HFwpLNEop9UvS9feFhvBUTP-k4,1576
|
|
4
4
|
assemblyline_v4_service/run_privileged_service.py,sha256=9uTfHetXR5G-EDKMDrgfWUOw34yr64-cj6Cm9eZaCbQ,14547
|
|
@@ -6,7 +6,7 @@ assemblyline_v4_service/run_service.py,sha256=RCqxdm-OAwJhl15BnKFkuavpQ5k6eTX3ZG
|
|
|
6
6
|
assemblyline_v4_service/common/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
7
7
|
assemblyline_v4_service/common/api.py,sha256=U908p3wlW9fEydx77GgI2E-6wW6T8Nc3R91nNOKU0H0,4453
|
|
8
8
|
assemblyline_v4_service/common/base.py,sha256=STzfZ9dwqvbgbKiFs-aLk05pdhyK6Psz4hZ3_fOmQYM,13039
|
|
9
|
-
assemblyline_v4_service/common/dynamic_service_helper.py,sha256=
|
|
9
|
+
assemblyline_v4_service/common/dynamic_service_helper.py,sha256=OhxSnSOjUB_iSkMahHbPQEll9sl5wLuCFwwykvV-Kno,147461
|
|
10
10
|
assemblyline_v4_service/common/helper.py,sha256=Fgimk8DhnS23aijTGewA1HwvPoAM61UUbHlrGBnSzL0,3290
|
|
11
11
|
assemblyline_v4_service/common/icap.py,sha256=phT3CT5uII3Qm90Nzi4O-eDkQ2jmr3zHcVVra4sqYSc,5376
|
|
12
12
|
assemblyline_v4_service/common/keytool_parse.py,sha256=e829hrNNG5LFw1kjLsYVZsafCm2S3NpgM6jBc6JKawY,2219
|
|
@@ -47,8 +47,8 @@ assemblyline_v4_service/updater/app.py,sha256=Ass5DZtOCr0tdoRbLo7Qn8Ujlw8T8mUDro
|
|
|
47
47
|
assemblyline_v4_service/updater/gunicorn_config.py,sha256=p3j2KPBeD5jvMw9O5i7vAtlRgPSVVxIG9AO0DfN82J8,1247
|
|
48
48
|
assemblyline_v4_service/updater/helper.py,sha256=JD0gX3KHY-wvsFjTbWkT83F0d5Up3OfubMPinuNzbTQ,9069
|
|
49
49
|
assemblyline_v4_service/updater/updater.py,sha256=AQ3aTm5nhb-RXWjm5w1RIZM3j3UQJ4Vr4bVJ6Z2rX8A,29322
|
|
50
|
-
assemblyline_v4_service-4.4.1.
|
|
51
|
-
assemblyline_v4_service-4.4.1.
|
|
52
|
-
assemblyline_v4_service-4.4.1.
|
|
53
|
-
assemblyline_v4_service-4.4.1.
|
|
54
|
-
assemblyline_v4_service-4.4.1.
|
|
50
|
+
assemblyline_v4_service-4.4.1.dev81.dist-info/LICENCE.md,sha256=NSkYo9EH8h5oOkzg4VhjAHF4339MqPP2cQ8msTPgl-c,1396
|
|
51
|
+
assemblyline_v4_service-4.4.1.dev81.dist-info/METADATA,sha256=_8o69m85obCPoDfZCPK8A_4K6e8LpBGujqwnmd_zJXk,9359
|
|
52
|
+
assemblyline_v4_service-4.4.1.dev81.dist-info/WHEEL,sha256=pkctZYzUS4AYVn6dJ-7367OJZivF2e8RA9b_ZBjif18,92
|
|
53
|
+
assemblyline_v4_service-4.4.1.dev81.dist-info/top_level.txt,sha256=Ut5IqePObcxlJ8rv2--dOAzYbxzqlllfiV_51cbqjbA,24
|
|
54
|
+
assemblyline_v4_service-4.4.1.dev81.dist-info/RECORD,,
|
|
File without changes
|
|
File without changes
|
|
File without changes
|