From c2617fe778b3a9c80aee588deda9cb28ea47d285 Mon Sep 17 00:00:00 2001 From: Nex Date: Wed, 20 Jul 2022 13:25:51 +0200 Subject: [PATCH] Checking profile IDs in profile_events --- mvt/ios/modules/backup/profile_events.py | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/mvt/ios/modules/backup/profile_events.py b/mvt/ios/modules/backup/profile_events.py index 6023d83..2b5601a 100644 --- a/mvt/ios/modules/backup/profile_events.py +++ b/mvt/ios/modules/backup/profile_events.py @@ -44,6 +44,12 @@ class ProfileEvents(IOSExtraction): if ioc: result["matched_indicator"] = ioc self.detected.append(result) + continue + + ioc = self.indicators.check_profile(result.get("profile_id")) + if ioc: + result["matched_indicator"] = ioc + self.detected.append(result) def run(self) -> None: for events_file in self._get_backup_files_from_manifest(relative_path=CONF_PROFILES_EVENTS_RELPATH):