tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Debugging

This commit is contained in:
Enrique Martin 2024-04-08 12:33:12 +02:00
parent b71adc42ac
commit 6725bb6da6
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
pandora_agents/plugins/windows/pandora_security_win/src/pandora_security_win.py
View File

@ -341,8 +341,7 @@ def check_login_audit_policy(auditpol_logon_category, auditpol_logon_success_con
# Run the auditpol command to check the audit policy for Logon/Logoff
cmd_command = f'auditpol /get /subcategory:"{auditpol_logon_category}"'
result = subprocess.run(cmd_command, shell=True, capture_output=True, text=True, check=True)
last_line = result.stdout.strip().split('\n')[-1]
cleaned_line = re.sub(' +', ' ', last_line)
last_line = result.stdout.strip().split('\n')[-1].strip()
# Interpret the result
if auditpol_logon_success_conf in result.stdout:
@ -357,7 +356,7 @@ def check_login_audit_policy(auditpol_logon_category, auditpol_logon_success_con
"type" : "generic_proc",
"value": result,
"module_group": "security",
"desc" : f"Check if the logon events audit log is enables, status:{cleaned_line}",
"desc" : f"Check if the logon events audit log is enables, status: {last_line}",
})
except subprocess.CalledProcessError as e: