Add better/more realtime security
This commit is contained in:
parent
df55d85a48
commit
5b380ca94d
1 changed files with 9 additions and 2 deletions
11
main.py
11
main.py
|
@ -208,10 +208,11 @@ def kill_suspicious_processes():
|
||||||
proc.terminate()
|
proc.terminate()
|
||||||
proc.wait()
|
proc.wait()
|
||||||
|
|
||||||
# Scan files for malware
|
# Scan files for malware as they launch and kill if potentially malicious.
|
||||||
for file_path in proc.info.get('cmdline', []):
|
for file_path in proc.info.get('cmdline', []):
|
||||||
if os.path.isfile(file_path):
|
if os.path.isfile(file_path):
|
||||||
if scan_for_malware(file_path):
|
if scan_for_malware(file_path):
|
||||||
|
print(f"Terminating potentially malicious process {proc.info['name']} (PID: {proc.info['pid']} NOW...")
|
||||||
proc.terminate()
|
proc.terminate()
|
||||||
proc.wait()
|
proc.wait()
|
||||||
except (psutil.NoSuchProcess, psutil.AccessDenied) as e:
|
except (psutil.NoSuchProcess, psutil.AccessDenied) as e:
|
||||||
|
@ -249,7 +250,7 @@ def monitor_tls_certificates():
|
||||||
while True:
|
while True:
|
||||||
for url in urls:
|
for url in urls:
|
||||||
verify_tls_cert(url)
|
verify_tls_cert(url)
|
||||||
time.sleep(3600) # Check every hour
|
time.sleep(60) # Check every minute
|
||||||
|
|
||||||
# Detecting Suspicious Browser Activity
|
# Detecting Suspicious Browser Activity
|
||||||
def monitor_browser(browser='chrome'):
|
def monitor_browser(browser='chrome'):
|
||||||
|
@ -290,12 +291,18 @@ def setup_firefox_driver():
|
||||||
service = FirefoxService()
|
service = FirefoxService()
|
||||||
return webdriver.Firefox(service=service, options=options)
|
return webdriver.Firefox(service=service, options=options)
|
||||||
|
|
||||||
|
def realtimeAV():
|
||||||
|
while True:
|
||||||
|
kill_suspicious_processes()
|
||||||
|
time.sleep(1) # check for malware every second
|
||||||
|
|
||||||
# Start Monitoring in Threads
|
# Start Monitoring in Threads
|
||||||
threads = [
|
threads = [
|
||||||
threading.Thread(target=start_file_system_monitor),
|
threading.Thread(target=start_file_system_monitor),
|
||||||
threading.Thread(target=monitor_cpu_gpu_usage),
|
threading.Thread(target=monitor_cpu_gpu_usage),
|
||||||
threading.Thread(target=monitor_registry_changes),
|
threading.Thread(target=monitor_registry_changes),
|
||||||
threading.Thread(target=monitor_tls_certificates),
|
threading.Thread(target=monitor_tls_certificates),
|
||||||
|
threading.Thread(target=kill_suspicious_processes),
|
||||||
threading.Thread(target=monitor_browser, args=('chrome',)),
|
threading.Thread(target=monitor_browser, args=('chrome',)),
|
||||||
threading.Thread(target=monitor_browser, args=('firefox',))
|
threading.Thread(target=monitor_browser, args=('firefox',))
|
||||||
]
|
]
|
||||||
|
|
Loading…
Reference in a new issue