def checkEvidences(self, indicators):
self.evidences = []
self.__getEvidences__(indicators, DnsHostScanner.getEvidenteType())
for evidence in self.evidences:
host = evidence.value
for entry_key in self.dns_entries.keys():
entry_value = self.dns_entries[entry_key]
if host in entry_value:
logger = Logger()
logger.warn( "Host MATCH: %s" % host)
evidence.compromised = True
evidence.proof.append(entry_value)
pass
pass
评论列表
文章目录