mysticmomba/AirlockTools
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 3 Wiki Activity

Working Chunkinantor

Browse Source
This commit is contained in:
brotoskyj
2025-09-01 13:16:43 -04:00
parent e9c7ba132a
commit 4b291a9521
2 changed files with 38 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
AirlockTools.py
+9 -9
View File
@@ -291,7 +291,7 @@ def menu_prepare_to_enforce():
executionhist_policy1 = executionhist_policy1.sort_values(by=['sha256','filename'])
executionhist_policy1.to_csv(f"dataframe_csv\\executionhist_{first_policy}.csv", index=False)
ct.style_dataframe_dark(executionhist_policy1, f"dataframe_html\\executionhist_{first_policy}.html")
#ct.style_dataframe_dark(executionhist_policy1, f"dataframe_html\\executionhist_{first_policy}.html")
print(ct.colorText(f"Staging of Execution history for policy: {first_policy} is complete","green"))
if not os.path.exists(f"dataframe_csv\\executionhist_{second_policy}.csv"):
@@ -303,7 +303,7 @@ def menu_prepare_to_enforce():
executionhist_policy2 = executionhist_policy2.sort_values(by=['sha256','filename'])
executionhist_policy2.to_csv(f"dataframe_csv\\executionhist_{second_policy}.csv", index=False)
ct.style_dataframe_dark(executionhist_policy2, f"dataframe_html\\executionhist_{second_policy}.html")
#ct.style_dataframe_dark(executionhist_policy2, f"dataframe_html\\executionhist_{second_policy}.html")
print(ct.colorText(f"Staging of Exection history for policy: {first_policy} is complete","green"))
#Combine the two policies execution histories
@@ -311,20 +311,20 @@ def menu_prepare_to_enforce():
if second_policy is first_policy:
execuctionhist_combined = executionhist_policy1
execuctionhist_combined.to_csv(f"dataframe_csv\\execuctionhist_combined_{first_policy}_{second_policy}.csv", index=False)
ct.style_dataframe_dark(df_aggregated_combo, f"dataframe_html\\execuctionhist_combined_{first_policy}_{second_policy}.html")
#ct.style_dataframe_dark(df_aggregated_combo, f"dataframe_html\\execuctionhist_combined_{first_policy}_{second_policy}.html")
print(ct.colorText(f"Dataframes have been combined","green"))
elif os.path.exists(f"dataframe_csv\\executionhist_{first_policy}.csv") and os.path.exists(f"dataframe_csv\\executionhist_{second_policy}.csv"):
execuctionhist_combined = pd.concat([tryToReadCSV(f"dataframe_csv\\executionhist_{first_policy}.csv") , tryToReadCSV(f"dataframe_csv\\executionhist_{second_policy}.csv")], ignore_index=True).sort_values(by=['sha256','filename'])
execuctionhist_combined.to_csv(f"dataframe_csv\\execuctionhist_combined_{first_policy}_{second_policy}.csv", index=False)
ct.style_dataframe_dark(df_aggregated_combo, f"dataframe_html\\execuctionhist_combined_{first_policy}_{second_policy}.html")
#ct.style_dataframe_dark(df_aggregated_combo, f"dataframe_html\\execuctionhist_combined_{first_policy}_{second_policy}.html")
print(ct.colorText(f"Dataframes have been combined","green"))
#Keep only unique combinations of hash, filename, and hostname
if f"dataframe_csv\\execuctionhist_combined_{first_policy}_{second_policy}.csv":
unique_executions = tryToReadCSV(f"dataframe_csv\\execuctionhist_combined_{first_policy}_{second_policy}.csv").drop_duplicates(subset=['sha256', 'filename', 'hostname'])
unique_executions.to_csv(f"dataframe_csv\\unique_executions{first_policy}_{second_policy}.csv")
ct.style_dataframe_dark(unique_executions, f"dataframe_html\\unique_execuctions.html")
#ct.style_dataframe_dark(unique_executions, f"dataframe_html\\unique_execuctions.html")
#Add Hash info to the combined execution history
@@ -332,7 +332,7 @@ def menu_prepare_to_enforce():
print(ct.colorText(f"Preparing to pull hash info","green"))
augmented_combo= utils.hashfunctions.augmentAggregatedHashes(url,tryToReadCSV(f"dataframe_csv\\unique_executions{first_policy}_{second_policy}.csv"))
augmented_combo.to_csv(f"dataframe_csv\\augmented_combo_{first_policy}_{second_policy}.csv", index=False)
ct.style_dataframe_dark(augmented_combo, f"dataframe_html\\augmented_combo_{first_policy}_{second_policy}.html")
#ct.style_dataframe_dark(augmented_combo, f"dataframe_html\\augmented_combo_{first_policy}_{second_policy}.html")
print(ct.colorText(f"Hash reputation info added to dataframe","green"))
#Categorize the hashes
@@ -345,19 +345,19 @@ def menu_prepare_to_enforce():
categorized[0].sort_values(by=['sha256','filename_x'])
categorized[0].to_csv(f"dataframe_csv\\hashes_needing_approval_{first_policy}_{second_policy}.csv", index=False)
ct.style_dataframe_dark(categorized[0], f"dataframe_html\\hashes_needing_approval_{first_policy}_{second_policy}.html")
#ct.style_dataframe_dark(categorized[0], f"dataframe_html\\hashes_needing_approval_{first_policy}_{second_policy}.html")
if not categorized[1].empty:
categorized[1].sort_values(by=['sha256','filename_x'])
categorized[1].to_csv(f"dataframe_csv\\automatically_approved_hashes_{first_policy}_{second_policy}.csv", index=False)
ct.style_dataframe_dark(categorized[1], f"dataframe_html\\automatically_approved_hashes_{first_policy}_{second_policy}.html")
#ct.style_dataframe_dark(categorized[1], f"dataframe_html\\automatically_approved_hashes_{first_policy}_{second_policy}.html")
if not categorized[2].empty:
categorized[2].sort_values(by=['sha256','filename_x'])
categorized[2].to_csv(f"dataframe_csv\\unapproved_hashes__{first_policy}_{second_policy}.csv", index=False)
ct.style_dataframe_dark(categorized[2], f"dataframe_html\\unapproved_hashes_{first_policy}_{second_policy}.html")
#ct.style_dataframe_dark(categorized[2], f"dataframe_html\\unapproved_hashes_{first_policy}_{second_policy}.html")
print(ct.colorText(f"Hashes have been categorized","green"))