2022-09-05 10:12:36 +00:00
|
|
|
# Mobile Verification Toolkit (MVT)
|
2023-09-09 15:55:27 +00:00
|
|
|
# Copyright (c) 2021-2023 The MVT Authors.
|
2022-09-05 10:12:36 +00:00
|
|
|
# Use of this software is governed by the MVT License 1.1 that can be found at
|
|
|
|
# https://license.mvt.re/1.1/
|
|
|
|
|
|
|
|
import logging
|
|
|
|
from typing import Optional
|
|
|
|
|
2023-07-26 11:42:17 +00:00
|
|
|
from mvt.android.artifacts.processes import Processes as ProcessesArtifact
|
|
|
|
|
2022-09-05 10:12:36 +00:00
|
|
|
from .base import AndroidQFModule
|
|
|
|
|
|
|
|
|
2023-07-26 11:42:17 +00:00
|
|
|
class Processes(ProcessesArtifact, AndroidQFModule):
|
2022-09-05 10:12:36 +00:00
|
|
|
"""This module analyse running processes"""
|
|
|
|
|
|
|
|
def __init__(
|
|
|
|
self,
|
|
|
|
file_path: Optional[str] = None,
|
|
|
|
target_path: Optional[str] = None,
|
|
|
|
results_path: Optional[str] = None,
|
2023-07-17 16:29:43 +00:00
|
|
|
module_options: Optional[dict] = None,
|
2022-09-05 10:12:36 +00:00
|
|
|
log: logging.Logger = logging.getLogger(__name__),
|
2023-06-01 21:40:26 +00:00
|
|
|
results: Optional[list] = None,
|
2022-09-05 10:12:36 +00:00
|
|
|
) -> None:
|
2023-06-01 21:40:26 +00:00
|
|
|
super().__init__(
|
|
|
|
file_path=file_path,
|
|
|
|
target_path=target_path,
|
|
|
|
results_path=results_path,
|
2023-07-17 16:29:43 +00:00
|
|
|
module_options=module_options,
|
2023-06-01 21:40:26 +00:00
|
|
|
log=log,
|
|
|
|
results=results,
|
|
|
|
)
|
2022-09-05 10:12:36 +00:00
|
|
|
|
|
|
|
def run(self) -> None:
|
|
|
|
ps_files = self._get_files_by_pattern("*/ps.txt")
|
|
|
|
if not ps_files:
|
|
|
|
return
|
|
|
|
|
2023-07-26 11:53:54 +00:00
|
|
|
self.parse(self._get_file_content(ps_files[0]).decode("utf-8"))
|
2022-09-05 10:12:36 +00:00
|
|
|
self.log.info("Identified %d running processes", len(self.results))
|