From 92de8565bde7465d6e8b8132ed695db54f8c12e3 Mon Sep 17 00:00:00 2001
From: brotoskyj <jbrotosky@gmail.com>
Date: Tue, 9 Sep 2025 12:22:10 -0400
Subject: [PATCH] Updated Bad Lists

---
 AirlockTools.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/AirlockTools.py b/AirlockTools.py
index 501b8ce..91f1186 100644
--- a/AirlockTools.py
+++ b/AirlockTools.py
@@ -35,8 +35,8 @@ dotenv.load_dotenv()
 #Constants
 url = os.getenv('url')
 bad_publisher_list = ["Brave","Zoom", "GlavSoft", "VNC"]
-pups = ["logmein", "invalid" , "nmap", "VNC", "Kaseya", "Solarwinds", "mRemoteNG", "LTSvc"]
-badpathparts = ["users", "wwwroot", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya", ] #"Windows\\assembly", "WindowsPowerShell\\Modules", "windows\\temp"3
+pups = ["logmein", "invalid", "nmap"]
+badpathparts = ["users", "wwwroot", "windows\\temp", "windows\\task", "windows\\system32", "startup", "windows\\fonts", "Recycle.Bin", "AppData", "programdata", "Solarwinds", "kaseya"]
 path_exclusion_constant = 4
 min_files_for_path = 4
 threat_tolerance_constant = 4