Tria/edr-platform
1
0
Fork 0
mirror of https://github.com/Tria-plc/edr-platform.git synced 2026-08-26 18:42:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add scan report

Browse Source
This commit is contained in:
SennayT
2026-06-13 10:27:37 +03:00
parent 377492c2ae
commit b6ece3dd6f
2 changed files with 257 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
.github/scripts/scan-malware.js → .github/scripts/scan.js vendored
View File

@@ -52,6 +52,10 @@ const CONFIG = {
"webpack.mix.js",
],
// Files intentionally containing malware indicators for scanner logic/tests.
// These filenames are skipped before malware rules are evaluated.
ignoredFilenames: ["scan.js"],
// Filesystem paths that indicate active persistence mechanisms
persistenceArtifacts: [
"temp_auto_push.bat",
@@ -327,6 +331,10 @@ const RULES = [
// ─── Scanner Engine ────────────────────────────────────────────────────────────
function scanFile(filePath) {
if (shouldIgnoreFile(filePath)) {
return { filePath, findings: [], skipped: true };
}
let content;
try {
content = fs.readFileSync(filePath, "utf8");
@@ -358,6 +366,11 @@ function scanFile(filePath) {
return { filePath, findings };
}
function shouldIgnoreFile(filePath) {
const base = path.basename(filePath).toLowerCase();
return CONFIG.ignoredFilenames.some((f) => f.toLowerCase() === base);
}
function walkDir(dir, results = []) {
let entries;
try {
@@ -372,7 +385,7 @@ function walkDir(dir, results = []) {
const full = path.join(dir, entry.name);
if (entry.isDirectory()) {
walkDir(full, results);
} else if (entry.isFile()) {
} else if (entry.isFile() && !shouldIgnoreFile(full)) {
const ext = path.extname(entry.name).toLowerCase();
const base = entry.name.toLowerCase();