From 1c7560c7e0cd27f8b909b60569d8d2ef8eea975c Mon Sep 17 00:00:00 2001
From: brotoskyj <jbrotosky@gmail.com>
Date: Wed, 24 Sep 2025 09:33:53 -0400
Subject: [PATCH 01/14] Rebased PUPS

---
 AirlockTools.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/AirlockTools.py b/AirlockTools.py
index 6d1b728..c1a1f16 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -31,7 +31,7 @@ dotenv.load_dotenv()
 #Constants
 url = os.getenv('url')
 bad_publisher_list = ["Brave","Zoom", "GlavSoft", "VNC"]
-pups = ["logmein", "invalid" , "nmap", "VNC", "Kaseya", "Solarwinds", "mRemoteNG"]
+pups = ["logmein", "invalid" , "nmap", "VNC", "Kaseya", "Solarwinds", "mRemoteNG", "LTSvc"]
 badpathparts = ["users", "wwwroot", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya", ] #"Windows\\assembly", "WindowsPowerShell\\Modules", "windows\\temp"3
 path_exclusion_constant = 4
 min_files_for_path = 4

From f02c42e05e59248d05c5eab055be38a99eeb026a Mon Sep 17 00:00:00 2001
From: brotoskyj <jbrotosky@gmail.com>
Date: Tue, 9 Sep 2025 12:22:10 -0400
Subject: [PATCH 02/14] Updated Bad Lists

---
 AirlockTools.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/AirlockTools.py b/AirlockTools.py
index c1a1f16..22c06c7 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -31,8 +31,8 @@ dotenv.load_dotenv()
 #Constants
 url = os.getenv('url')
 bad_publisher_list = ["Brave","Zoom", "GlavSoft", "VNC"]
-pups = ["logmein", "invalid" , "nmap", "VNC", "Kaseya", "Solarwinds", "mRemoteNG", "LTSvc"]
-badpathparts = ["users", "wwwroot", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya", ] #"Windows\\assembly", "WindowsPowerShell\\Modules", "windows\\temp"3
+pups = ["logmein", "invalid", "nmap"]
+badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya"]
 path_exclusion_constant = 4
 min_files_for_path = 4
 threat_tolerance_constant = 4

From c81073ef231c4a5932837e1eaae7bff62e2defc8 Mon Sep 17 00:00:00 2001
From: brotoskyj <jbrotosky@gmail.com>
Date: Wed, 24 Sep 2025 09:23:39 -0400
Subject: [PATCH 03/14] Added LTSvc

---
 AirlockTools.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/AirlockTools.py b/AirlockTools.py
index 22c06c7..5923c22 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -31,7 +31,7 @@ dotenv.load_dotenv()
 #Constants
 url = os.getenv('url')
 bad_publisher_list = ["Brave","Zoom", "GlavSoft", "VNC"]
-pups = ["logmein", "invalid", "nmap"]
+pups = ["logmein", "invalid", "nmap", "LTSvc"]
 badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya"]
 path_exclusion_constant = 4
 min_files_for_path = 4

From 8bc3f1a7799bd3d99cbf38c845b3e414393556eb Mon Sep 17 00:00:00 2001
From: brotoskyj <jbrotosky@gmail.com>
Date: Tue, 9 Sep 2025 12:22:10 -0400
Subject: [PATCH 04/14] Updated Bad Lists

---
 AirlockTools.py | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/AirlockTools.py b/AirlockTools.py
index 5923c22..fc3fa25 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -31,8 +31,13 @@ dotenv.load_dotenv()
 #Constants
 url = os.getenv('url')
 bad_publisher_list = ["Brave","Zoom", "GlavSoft", "VNC"]
-pups = ["logmein", "invalid", "nmap", "LTSvc"]
+<<<<<<< HEAD
+pups = ["logmein", "invalid" , "nmap"]
+badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya", "Windows\\assembly", "WindowsPowerShell\\Modules"]
+=======
+pups = ["logmein", "invalid", "nmap"]
 badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya"]
+>>>>>>> 0c7e8b5 (Updated Bad Lists)
 path_exclusion_constant = 4
 min_files_for_path = 4
 threat_tolerance_constant = 4

From caa32b9151eaf32289afb950e66f5c4752cd1064 Mon Sep 17 00:00:00 2001
From: brotoskyj <jbrotosky@gmail.com>
Date: Tue, 9 Sep 2025 12:22:10 -0400
Subject: [PATCH 05/14] Updated Bad Lists

---
 AirlockTools.py | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/AirlockTools.py b/AirlockTools.py
index fc3fa25..22c06c7 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -31,13 +31,8 @@ dotenv.load_dotenv()
 #Constants
 url = os.getenv('url')
 bad_publisher_list = ["Brave","Zoom", "GlavSoft", "VNC"]
-<<<<<<< HEAD
-pups = ["logmein", "invalid" , "nmap"]
-badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya", "Windows\\assembly", "WindowsPowerShell\\Modules"]
-=======
 pups = ["logmein", "invalid", "nmap"]
 badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya"]
->>>>>>> 0c7e8b5 (Updated Bad Lists)
 path_exclusion_constant = 4
 min_files_for_path = 4
 threat_tolerance_constant = 4

From 4260b213ead45cce3cb9832b01017d244493d15f Mon Sep 17 00:00:00 2001
From: brotoskyj <jbrotosky@gmail.com>
Date: Wed, 24 Sep 2025 09:23:39 -0400
Subject: [PATCH 06/14] Added LTSvc

---
 AirlockTools.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/AirlockTools.py b/AirlockTools.py
index 22c06c7..5923c22 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -31,7 +31,7 @@ dotenv.load_dotenv()
 #Constants
 url = os.getenv('url')
 bad_publisher_list = ["Brave","Zoom", "GlavSoft", "VNC"]
-pups = ["logmein", "invalid", "nmap"]
+pups = ["logmein", "invalid", "nmap", "LTSvc"]
 badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya"]
 path_exclusion_constant = 4
 min_files_for_path = 4

From 49ca81a548b32edecd0db18cd047db2a44764c3f Mon Sep 17 00:00:00 2001
From: brotoskyj <jbrotosky@gmail.com>
Date: Wed, 24 Sep 2025 09:42:53 -0400
Subject: [PATCH 07/14] Added New PUPS

---
 AirlockTools.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/AirlockTools.py b/AirlockTools.py
index 5923c22..958cec8 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -31,7 +31,7 @@ dotenv.load_dotenv()
 #Constants
 url = os.getenv('url')
 bad_publisher_list = ["Brave","Zoom", "GlavSoft", "VNC"]
-pups = ["logmein", "invalid", "nmap", "LTSvc"]
+pups = ["logmein", "invalid", "nmap", "LTSvc", "VNC", "Kaseya", "Solarwinds", "mRemoteNG"]
 badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya"]
 path_exclusion_constant = 4
 min_files_for_path = 4

From 0aa313d893f599b63390110ec02014772b04c4e7 Mon Sep 17 00:00:00 2001
From: brotoskyj <jbrotosky@gmail.com>
Date: Wed, 24 Sep 2025 09:33:53 -0400
Subject: [PATCH 08/14] Rebased PUPS

---
 AirlockTools.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/AirlockTools.py b/AirlockTools.py
index 958cec8..c1a1f16 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -31,8 +31,8 @@ dotenv.load_dotenv()
 #Constants
 url = os.getenv('url')
 bad_publisher_list = ["Brave","Zoom", "GlavSoft", "VNC"]
-pups = ["logmein", "invalid", "nmap", "LTSvc", "VNC", "Kaseya", "Solarwinds", "mRemoteNG"]
-badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya"]
+pups = ["logmein", "invalid" , "nmap", "VNC", "Kaseya", "Solarwinds", "mRemoteNG", "LTSvc"]
+badpathparts = ["users", "wwwroot", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya", ] #"Windows\\assembly", "WindowsPowerShell\\Modules", "windows\\temp"3
 path_exclusion_constant = 4
 min_files_for_path = 4
 threat_tolerance_constant = 4

From fabe2795f0986f24014fe324c455b9a03741fe92 Mon Sep 17 00:00:00 2001
From: brotoskyj <jbrotosky@gmail.com>
Date: Tue, 9 Sep 2025 12:22:10 -0400
Subject: [PATCH 09/14] Updated Bad Lists

---
 AirlockTools.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/AirlockTools.py b/AirlockTools.py
index c1a1f16..22c06c7 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -31,8 +31,8 @@ dotenv.load_dotenv()
 #Constants
 url = os.getenv('url')
 bad_publisher_list = ["Brave","Zoom", "GlavSoft", "VNC"]
-pups = ["logmein", "invalid" , "nmap", "VNC", "Kaseya", "Solarwinds", "mRemoteNG", "LTSvc"]
-badpathparts = ["users", "wwwroot", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya", ] #"Windows\\assembly", "WindowsPowerShell\\Modules", "windows\\temp"3
+pups = ["logmein", "invalid", "nmap"]
+badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya"]
 path_exclusion_constant = 4
 min_files_for_path = 4
 threat_tolerance_constant = 4

From c17034d2fe07f7464eb5f6701e86a169f6398f52 Mon Sep 17 00:00:00 2001
From: brotoskyj <jbrotosky@gmail.com>
Date: Wed, 24 Sep 2025 09:23:39 -0400
Subject: [PATCH 10/14] Added LTSvc

---
 AirlockTools.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/AirlockTools.py b/AirlockTools.py
index 22c06c7..5923c22 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -31,7 +31,7 @@ dotenv.load_dotenv()
 #Constants
 url = os.getenv('url')
 bad_publisher_list = ["Brave","Zoom", "GlavSoft", "VNC"]
-pups = ["logmein", "invalid", "nmap"]
+pups = ["logmein", "invalid", "nmap", "LTSvc"]
 badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya"]
 path_exclusion_constant = 4
 min_files_for_path = 4

From 385dbfe769728196fd9a0ea058608f80006de76e Mon Sep 17 00:00:00 2001
From: brotoskyj <jbrotosky@gmail.com>
Date: Tue, 9 Sep 2025 12:22:10 -0400
Subject: [PATCH 11/14] Updated Bad Lists

---
 AirlockTools.py | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/AirlockTools.py b/AirlockTools.py
index 5923c22..fc3fa25 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -31,8 +31,13 @@ dotenv.load_dotenv()
 #Constants
 url = os.getenv('url')
 bad_publisher_list = ["Brave","Zoom", "GlavSoft", "VNC"]
-pups = ["logmein", "invalid", "nmap", "LTSvc"]
+<<<<<<< HEAD
+pups = ["logmein", "invalid" , "nmap"]
+badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya", "Windows\\assembly", "WindowsPowerShell\\Modules"]
+=======
+pups = ["logmein", "invalid", "nmap"]
 badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya"]
+>>>>>>> 0c7e8b5 (Updated Bad Lists)
 path_exclusion_constant = 4
 min_files_for_path = 4
 threat_tolerance_constant = 4

From c21d0a86fa184124301f1f80c346e7cd8d264557 Mon Sep 17 00:00:00 2001
From: brotoskyj <jbrotosky@gmail.com>
Date: Tue, 9 Sep 2025 12:22:10 -0400
Subject: [PATCH 12/14] Updated Bad Lists

---
 AirlockTools.py | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/AirlockTools.py b/AirlockTools.py
index fc3fa25..22c06c7 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -31,13 +31,8 @@ dotenv.load_dotenv()
 #Constants
 url = os.getenv('url')
 bad_publisher_list = ["Brave","Zoom", "GlavSoft", "VNC"]
-<<<<<<< HEAD
-pups = ["logmein", "invalid" , "nmap"]
-badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya", "Windows\\assembly", "WindowsPowerShell\\Modules"]
-=======
 pups = ["logmein", "invalid", "nmap"]
 badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya"]
->>>>>>> 0c7e8b5 (Updated Bad Lists)
 path_exclusion_constant = 4
 min_files_for_path = 4
 threat_tolerance_constant = 4

From 0ef9efc9f7c366f1953fe99a47a48f731d8e7b88 Mon Sep 17 00:00:00 2001
From: brotoskyj <jbrotosky@gmail.com>
Date: Wed, 24 Sep 2025 09:23:39 -0400
Subject: [PATCH 13/14] Added LTSvc

---
 AirlockTools.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/AirlockTools.py b/AirlockTools.py
index 22c06c7..5923c22 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -31,7 +31,7 @@ dotenv.load_dotenv()
 #Constants
 url = os.getenv('url')
 bad_publisher_list = ["Brave","Zoom", "GlavSoft", "VNC"]
-pups = ["logmein", "invalid", "nmap"]
+pups = ["logmein", "invalid", "nmap", "LTSvc"]
 badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya"]
 path_exclusion_constant = 4
 min_files_for_path = 4

From d05e5b9d8b8078cd174bcf6aef53fb907dced4cf Mon Sep 17 00:00:00 2001
From: brotoskyj <jbrotosky@gmail.com>
Date: Wed, 24 Sep 2025 09:42:53 -0400
Subject: [PATCH 14/14] Added New PUPS

---
 AirlockTools.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/AirlockTools.py b/AirlockTools.py
index 5923c22..958cec8 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -31,7 +31,7 @@ dotenv.load_dotenv()
 #Constants
 url = os.getenv('url')
 bad_publisher_list = ["Brave","Zoom", "GlavSoft", "VNC"]
-pups = ["logmein", "invalid", "nmap", "LTSvc"]
+pups = ["logmein", "invalid", "nmap", "LTSvc", "VNC", "Kaseya", "Solarwinds", "mRemoteNG"]
 badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya"]
 path_exclusion_constant = 4
 min_files_for_path = 4