Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Conversation

@phutelmyer
Copy link
Contributor

Describe the change
Updating the ISO scanner to:

  • Identify possible hidden directories
  • Identify possible metadata, such as: ISO create, modify, expire date as well as ISO label.

Describe testing procedures
Built and ran against 10+ benign and malicious ISO files.

Sample output

..
 "iso": {
      "elapsed": 0.032328,
      "files":  [
        {
          "date_utc": "2022-11-17T17:48:57Z",
          "filename": "/Contract",
          "size": 2521
        },
        {
          "date_utc": "2022-11-17T17:48:57Z",
          "filename": "/fireman/ineligibly.tmp",
          "size": 707584
        },
        {
          "date_utc": "2022-11-17T17:46:07Z",
          "filename": "/unbelt/opinionate.txt",
          "size": 87900
        }
      ],
      "hidden_dirs": [
        "/fireman”,
        “/unbelt”
      ],
      "meta": {
        "date_created": "2022-11-18T03:00:00Z",
        "volume_identifier": "CD_ROM                          "
      },
      "total": {
        "extracted": 3,
        "files": 3
      }
...

Checklist

  • My code follows the style guidelines of this project
  • I have performed a self-review of and tested my code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings

@phutelmyer phutelmyer changed the title Scan iso update ISO Hidden File and Metadata Update Nov 18, 2022
@phutelmyer phutelmyer merged commit 4123021 into master Nov 18, 2022
@phutelmyer phutelmyer deleted the scan_iso_update branch December 30, 2022 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant