{% extends "base.html" %} {% block content %}
Comprehensive overview of all scan results.
Name: {{ info.name }}
PID: {{ info.pid }}
Path: {{ info.path }}
| Scanner | Status | Detections | Details |
|---|---|---|---|
| YARA | {{ 'Suspicious' if yara_detections else 'Clean' }} | {{ yara_detections }} |
{% if yara_detections %}
{% for match in analysis_results.yara.matches %}
{% else %}
No threats detected
{% endif %}
Rule: {{ match.rule }}
{% if match.metadata %}
(Severity: {{ match.metadata.severity }})
{% endif %}
{% endfor %}
|
| PE-sieve | {{ 'Suspicious' if pesieve_detections else 'Clean' }} | {{ pesieve_detections }} |
{% if pesieve_detections %}
{% set findings = analysis_results.pe_sieve.findings %}
{% if findings.total_scanned > 0 %}
{% else %}
No modifications detected
{% endif %}
Total Scanned: {{ findings.total_scanned }}
{% endif %}
{% if findings.skipped > 0 %}
Skipped: {{ findings.skipped }}
{% endif %}
{% if findings.hooked > 0 %}
Hooked: {{ findings.hooked }}
{% endif %}
{% if findings.replaced > 0 %}
Replaced: {{ findings.replaced }}
{% endif %}
{% if findings.hdrs_modified > 0 %}
Headers Modified: {{ findings.hdrs_modified }}
{% endif %}
{% if findings.iat_hooks > 0 %}
IAT Hooks: {{ findings.iat_hooks }}
{% endif %}
{% if findings.implanted > 0 %}
Implanted: {{ findings.implanted }}
{% endif %}
{% if findings.implanted_pe > 0 %}
Implanted PE: {{ findings.implanted_pe }}
{% endif %}
{% if findings.implanted_shc > 0 %}
Implanted Shellcode: {{ findings.implanted_shc }}
{% endif %}
{% if findings.unreachable > 0 %}
Unreachable Files: {{ findings.unreachable }}
{% endif %}
{% if findings.other > 0 %}
Other: {{ findings.other }}
{% endif %}
{% if findings.total_suspicious > 0 %}
Total Suspicious: {{ findings.total_suspicious }}
{% endif %}
|
| Moneta | {{ 'Suspicious' if moneta_detections else 'Clean' }} | {{ moneta_detections }} |
{% if moneta_detections %}
{% set findings = analysis_results.moneta.findings %}
{% if findings.total_private_rwx > 0 %}
{% else %}
No anomalies detected
{% endif %}
Private RWX: {{ findings.total_private_rwx }}
{% endif %}
{% if findings.total_private_rx > 0 %}
Private RX: {{ findings.total_private_rx }}
{% endif %}
{% if findings.total_modified_code > 0 %}
Modified Code: {{ findings.total_modified_code }}
{% endif %}
{% if findings.total_heap_executable > 0 %}
Heap Executable: {{ findings.total_heap_executable }}
{% endif %}
{% if findings.total_missing_peb > 0 %}
Missing PEB: {{ findings.total_missing_peb }}
{% endif %}
{% if findings.total_mismatching_peb > 0 %}
Mismatching PEB: {{ findings.total_mismatching_peb }}
{% endif %}
|
| Patriot | {{ 'Suspicious' if patriot_detections else 'Clean' }} | {{ patriot_detections }} |
{% if patriot_detections %}
{% for finding in analysis_results.patriot.findings.findings %}
{% else %}
No suspicious activities
{% endif %}
{{ finding.type }} ({{ finding.level }})
{% endfor %}
|
| Hunt-Sleeping-Beacons | {{ 'Suspicious' if hsb_detections else 'Clean' }} | {{ hsb_detections }} |
{% if hsb_detections %}
{% for detection in analysis_results.hsb.findings.detections %}
{% for finding in detection.findings %}
{% else %}
No suspicious behavior
{% endif %}
{{ finding.type }} ({{ finding.severity }})
{% endfor %}
{% endfor %}
|