From 5e03c28dbdd566aa51c7507367d5d7691a7fd2af Mon Sep 17 00:00:00 2001 From: macmade Date: Thu, 29 Jul 2021 02:33:32 +0200 Subject: [PATCH] Chrome History - Cheking extracted URLs against indicators. --- mvt/ios/modules/fs/chrome_history.py | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/mvt/ios/modules/fs/chrome_history.py b/mvt/ios/modules/fs/chrome_history.py index 8d8a64e..557b196 100644 --- a/mvt/ios/modules/fs/chrome_history.py +++ b/mvt/ios/modules/fs/chrome_history.py @@ -35,6 +35,14 @@ class ChromeHistory(IOSExtraction): "data": f"{record['id']} - {record['url']} (visit ID: {record['visit_id']}, redirect source: {record['redirect_source']})" } + def check_indicators(self): + if not self.indicators: + return + + for result in self.results: + if self.indicators.check_domain(result["url"]): + self.detected.append(result) + def run(self): self._find_ios_database(backup_ids=CHROME_HISTORY_BACKUP_IDS, root_paths=CHROME_HISTORY_ROOT_PATHS) self.log.info("Found Chrome history database at path: %s", self.file_path)