mirror of
https://github.com/CheckPointSW/InviZzzible
synced 2026-06-08 10:35:43 +00:00
chkp-alexeybu
127 lines
5.1 KiB
C++
127 lines
5.1 KiB
C++
#include "config.h"
|
|
|
|
namespace SandboxEvasion {
|
|
namespace Config {
|
|
|
|
std::map<ConfigGlobal, std::string> cg2s = {
|
|
{ ConfigGlobal::DESCRIPTION, "description" },
|
|
{ ConfigGlobal::COUNTERMEASURES, "countermeasures" },
|
|
{ ConfigGlobal::TYPE, "type" },
|
|
{ ConfigGlobal::ENABLED, "enabled" },
|
|
{ ConfigGlobal::ARGUMENTS, "arguments" },
|
|
{ ConfigGlobal::SCORE, "score" }
|
|
};
|
|
|
|
std::map<ConfigGlobalType, std::string> cgt2s = {
|
|
{ ConfigGlobalType::CUSTOM, "custom" },
|
|
{ ConfigGlobalType::FILE, "file" },
|
|
{ ConfigGlobalType::REGISTRY, "registry" },
|
|
{ ConfigGlobalType::DEVICE, "device" },
|
|
{ ConfigGlobalType::PROCESS, "process" },
|
|
{ ConfigGlobalType::MAC, "mac" },
|
|
{ ConfigGlobalType::ADAPTER, "adapter" },
|
|
{ ConfigGlobalType::DISK, "disk" },
|
|
{ ConfigGlobalType::DRIVE_MODEL, "drive_model" },
|
|
{ ConfigGlobalType::FIRMWARE, "firmware" },
|
|
{ ConfigGlobalType::OBJECT, "object" },
|
|
{ ConfigGlobalType::CPUID_H, "cpuid_h" },
|
|
{ ConfigGlobalType::WINDOW, "window" },
|
|
{ ConfigGlobalType::SHARED, "shared" },
|
|
{ ConfigGlobalType::CPUID_V, "cpuid_v" },
|
|
{ ConfigGlobalType::HAS_LOADED_MOD, "has_loaded_mod" },
|
|
{ ConfigGlobalType::EXE_PATH_PATTERN, "exe_path_pattern"},
|
|
{ ConfigGlobalType::MAX_PROCS_NUMBER, "max_processes_number" },
|
|
{ ConfigGlobalType::PROC_WITH_LONG_NAME, "process_with_long_name" },
|
|
{ ConfigGlobalType::USER_NAME, "user_name" },
|
|
{ ConfigGlobalType::COMPUTER_NAME, "computer_name" },
|
|
{ ConfigGlobalType::HOST_NAME, "host_name" },
|
|
{ ConfigGlobalType::DISPLAY_ADAPTER, "display_adapter" },
|
|
};
|
|
|
|
std::map<ConfigGlobalEnabled, std::string> cge2s = {
|
|
{ ConfigGlobalEnabled::YES, "yes" },
|
|
{ ConfigGlobalEnabled::NO, "no" }
|
|
};
|
|
|
|
std::map<ConfigCuckoo, std::string> cc2s = {
|
|
{ ConfigCuckoo::INVALID_HOOK, "InvalidHook" },
|
|
{ ConfigCuckoo::LACK_ARGCHECKS, "LackOfArgumentChecks" },
|
|
{ ConfigCuckoo::UNBALANCED_STACK, "UnbalancedStack" },
|
|
{ ConfigCuckoo::INFINITE_DELAY, "InfiniteDelay" },
|
|
{ ConfigCuckoo::DELAYS_ACCUMULATION, "DelaysAccumulation" },
|
|
{ ConfigCuckoo::SOCKET_TIMEOUT, "SocketTimeout" },
|
|
{ ConfigCuckoo::FUNCTION_HOOKS, "FunctionHooks" },
|
|
{ ConfigCuckoo::AGENT_ARTIFACTS, "AgentArtifacts" },
|
|
{ ConfigCuckoo::CUCKOOMON_CONFIGURATION, "CuckoomonConfiguration" },
|
|
{ ConfigCuckoo::WHITELISTED_PROCESS, "WhitelistedProcess" },
|
|
{ ConfigCuckoo::EVENT_NAME, "EventName" },
|
|
{ ConfigCuckoo::RAISED_EXCEPTIONS, "RaisedExceptions" },
|
|
{ ConfigCuckoo::WMI_PROCESS, "WMIProcess" },
|
|
{ ConfigCuckoo::TASK_SCHED_PROCESS, "TaskSchedulerProcess" },
|
|
{ ConfigCuckoo::PID_REUSE, "PidReuse" },
|
|
{ ConfigCuckoo::AGENT_LISTENER, "AgentListener" },
|
|
{ ConfigCuckoo::SUSPENDED_THREAD, "SuspendedThread" },
|
|
{ ConfigCuckoo::DELAY_INTERVAL, "DelayInterval" },
|
|
{ ConfigCuckoo::TICK_COUNT, "TickCount" },
|
|
{ ConfigCuckoo::RESULTSERVER_CONNECTION, "ResultserverConnection" },
|
|
{ ConfigCuckoo::DEAD_ANALYZER, "DeadAnalyzer" }
|
|
};
|
|
|
|
std::map<ConfigArgs, std::string> ca2s = {
|
|
{ ConfigArgs::CHECK, "check" },
|
|
{ ConfigArgs::HKEY, "hkey" },
|
|
{ ConfigArgs::KEY, "key" },
|
|
{ ConfigArgs::SUBKEY, "subkey" },
|
|
{ ConfigArgs::VALUE_NAME, "value_name" },
|
|
{ ConfigArgs::VALUE_DATA, "value_data" },
|
|
{ ConfigArgs::NAME, "name" },
|
|
{ ConfigArgs::VENDOR, "vendor" },
|
|
{ ConfigArgs::DIRECTORY, "directory" },
|
|
{ ConfigArgs::RECURSIVE, "recursive" },
|
|
{ ConfigArgs::PATTERN, "pattern" },
|
|
{ ConfigArgs::NUMBER, "number" },
|
|
};
|
|
|
|
std::map<ConfigArgsRegCheckType, std::string> carct2s = {
|
|
{ ConfigArgsRegCheckType::EXISTS, "exists" },
|
|
{ ConfigArgsRegCheckType::CONTAINS, "contains" },
|
|
{ ConfigArgsRegCheckType::ENUM_KEYS, "enum_keys" },
|
|
{ ConfigArgsRegCheckType::ENUM_VALUES, "enum_values" }
|
|
};
|
|
|
|
std::map<ConfigVMWare, std::string> cvm2s = {
|
|
{ ConfigVMWare::HYPERVISOR_PORT, "HypervisorPort" },
|
|
{ ConfigVMWare::HYPERVISOR_PORT_ENUM, "HypervisorPortEnum" },
|
|
{ ConfigVMWare::HYPERVISOR_BIT, "HypervisorBit" }
|
|
};
|
|
|
|
std::map<ConfigArgsFirmwareCheckType, std::string> cafct2s = {
|
|
{ ConfigArgsFirmwareCheckType::FIRMBIOS, "firm" },
|
|
{ ConfigArgsFirmwareCheckType::RSMBBIOS, "rsmb" }
|
|
};
|
|
|
|
std::map<ConfigArgsWindowCheckType, std::string> cawct2s = {
|
|
{ ConfigArgsWindowCheckType::CLASS, "class" },
|
|
{ ConfigArgsWindowCheckType::WINDOW, "window" }
|
|
};
|
|
|
|
std::map<ConfigGeneric, std::string> cgen2s = {
|
|
{ ConfigGeneric::DISK_SIZE, "DiskSize" },
|
|
{ ConfigGeneric::DRIVE_SIZE, "DriveSize" },
|
|
{ ConfigGeneric::MOUSE_ACTIVE, "MouseActive" },
|
|
{ ConfigGeneric::RAM, "RAM" },
|
|
{ ConfigGeneric::DEVICE_NPF_NDIS, "DeviceNPF_NDIS" },
|
|
{ ConfigGeneric::SYSTEM_UPTIME, "SystemUptime" },
|
|
{ ConfigGeneric::SLEEP_DUMMY, "SleepDummyPatch" },
|
|
{ ConfigGeneric::PROCESSORS_COUNT, "ProcessorsCount" },
|
|
{ ConfigGeneric::DNS_RESPONSE, "DnsResponse" },
|
|
{ ConfigGeneric::TIME_TAMPERING, "TimeTampering" },
|
|
{ ConfigGeneric::PERFORMANCE_COUNTER, "PerformanceCounter" },
|
|
{ ConfigGeneric::MOUSE_RAW_ACTIVE, "MouseRawActive" },
|
|
{ ConfigGeneric::BIG_RAM_ALLOC, "BigRamAlloc" },
|
|
{ ConfigGeneric::USER_INPUT_ACTIVITY, "UserInputActivity" },
|
|
{ ConfigGeneric::AUDIO_DEVICE_ABSENCE, "AudioDeviceAbsence"},
|
|
};
|
|
|
|
} // Config
|
|
} // SandboxEvasion
|