Skip to content

Commit ac04471

Browse files
committed
Removed old unsorted doc and updated the taxonomy functions for the scan_exchange report.
1 parent 307386d commit ac04471

File tree

2 files changed

+5
-29
lines changed

2 files changed

+5
-29
lines changed

docs/unsorted/shadowserver.md

Lines changed: 0 additions & 24 deletions
This file was deleted.

intelmq/bots/parsers/shadowserver/_config.py

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -263,19 +263,19 @@ def force_base64(value: Optional[str]) -> Optional[str]:
263263

264264

265265
def scan_exchange_taxonomy(field):
266-
if field == 'exchange;webshell':
266+
if 'webshell' in field:
267267
return 'intrusions'
268268
return 'vulnerable'
269269

270270

271271
def scan_exchange_type(field):
272-
if field == 'exchange;webshell':
272+
if 'webshell' in field:
273273
return 'system-compromise'
274-
return 'infected-system'
274+
return 'vulnerable-system'
275275

276276

277277
def scan_exchange_identifier(field):
278-
if field == 'exchange;webshell':
278+
if 'webshell' in field:
279279
return 'exchange-server-webshell'
280280
return 'vulnerable-exchange-server'
281281

@@ -321,7 +321,7 @@ def reload():
321321
return
322322
else:
323323
if not __config.test_mode:
324-
raise ValueError("The schema file does not exist.")
324+
raise ValueError("The schema file does not exist: %r.", __config.schema_file)
325325

326326
if __config.schema_mtime == 0.0 and mtime == 0.0 and __config.auto_update:
327327
update_schema()

0 commit comments

Comments
 (0)