Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/undo-ransomware/ransomware_detection.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMatthias <ilovemilk@wusa.io>2020-09-14 19:15:26 +0300
committerMatthias <ilovemilk@wusa.io>2020-09-14 19:15:26 +0300
commitdfeda8d4bdd88d5ec99a87610b47ade98a8065d7 (patch)
tree538b60cacac6e2e53f838e3d1d61702cbe47dd42 /appinfo
parent8981ac7f42307d3b56e76a3aae9a99d4c6f83200 (diff)
add recovered file operations
Diffstat (limited to 'appinfo')
-rw-r--r--appinfo/database.xml99
-rw-r--r--appinfo/info.xml2
-rw-r--r--appinfo/routes.php4
3 files changed, 104 insertions, 1 deletions
diff --git a/appinfo/database.xml b/appinfo/database.xml
index 261e631..12d4170 100644
--- a/appinfo/database.xml
+++ b/appinfo/database.xml
@@ -103,4 +103,103 @@
</field>
</declaration>
</table>
+ <table>
+ <name>*dbprefix*ransomware_detection_recovered</name>
+ <declaration>
+ <field>
+ <name>id</name>
+ <type>integer</type>
+ <notnull>true</notnull>
+ <autoincrement>true</autoincrement>
+ </field>
+ <field>
+ <name>user_id</name>
+ <type>text</type>
+ <notnull>true</notnull>
+ <length>255</length>
+ </field>
+ <field>
+ <name>path</name>
+ <type>text</type>
+ <notnull>false</notnull>
+ <length>255</length>
+ </field>
+ <field>
+ <name>original_name</name>
+ <type>text</type>
+ <notnull>false</notnull>
+ <length>255</length>
+ </field>
+ <field>
+ <name>new_name</name>
+ <type>text</type>
+ <notnull>false</notnull>
+ <length>255</length>
+ </field>
+ <field>
+ <name>type</name>
+ <type>text</type>
+ <notnull>false</notnull>
+ <length>255</length>
+ </field>
+ <field>
+ <name>mime_type</name>
+ <type>text</type>
+ <notnull>false</notnull>
+ <length>255</length>
+ </field>
+ <field>
+ <name>size</name>
+ <type>integer</type>
+ <notnull>false</notnull>
+ <length>32</length>
+ </field>
+ <field>
+ <name>corrupted</name>
+ <type>integer</type>
+ <notnull>false</notnull>
+ <length>32</length>
+ </field>
+ <field>
+ <name>timestamp</name>
+ <type>integer</type>
+ <notnull>true</notnull>
+ <length>12</length>
+ </field>
+ <field>
+ <name>command</name>
+ <type>integer</type>
+ <notnull>true</notnull>
+ <length>12</length>
+ </field>
+ <field>
+ <name>sequence</name>
+ <type>integer</type>
+ <notnull>true</notnull>
+ <length>255</length>
+ </field>
+ <field>
+ <name>entropy</name>
+ <type>float</type>
+ <notnull>false</notnull>
+ </field>
+ <field>
+ <name>standard_deviation</name>
+ <type>float</type>
+ <notnull>false</notnull>
+ </field>
+ <field>
+ <name>file_class</name>
+ <type>text</type>
+ <notnull>false</notnull>
+ <length>64</length>
+ </field>
+ <field>
+ <name>file_extension_class</name>
+ <type>text</type>
+ <notnull>false</notnull>
+ <length>64</length>
+ </field>
+ </declaration>
+ </table>
</database>
diff --git a/appinfo/info.xml b/appinfo/info.xml
index 5095179..2e5762d 100644
--- a/appinfo/info.xml
+++ b/appinfo/info.xml
@@ -5,7 +5,7 @@
<name>Ransomware recovery</name>
<summary><![CDATA[This app offers synchronization monitoring and a file storage scanner for a guided user-controlled one-step ransomare recovery.]]></summary>
<description><![CDATA[This app monitors file operations during the synchronization to detect ransomware attacks and also offers a post infection file storage scanner, which works even if it happend that you didn't have this app installed during an attack. This is done by using generic indicators for a guided user-controlled one-step recovery utilizing the integrated file versioning methods. Sponsored by the German Federal Ministry of Education and Research, and Prototype Fund.]]></description>
- <version>0.8.0</version>
+ <version>0.8.2</version>
<licence>agpl</licence>
<author mail="matthias.held@uni-konstanz.de">Matthias Held</author>
<namespace>RansomwareDetection</namespace>
diff --git a/appinfo/routes.php b/appinfo/routes.php
index d2b1631..1cb9768 100644
--- a/appinfo/routes.php
+++ b/appinfo/routes.php
@@ -15,6 +15,10 @@ return [
['name' => 'fileOperation#findAll', 'url' => '/api/{apiVersion}/file-operation', 'verb' => 'GET', 'requirements' => ['apiVersion' => 'v1']],
['name' => 'fileOperation#find', 'url' => '/api/{apiVersion}/file-operation/{id}', 'verb' => 'GET', 'requirements' => ['apiVersion' => 'v1']],
['name' => 'fileOperation#recover', 'url' => '/api/{apiVersion}/file-operations/recover', 'verb' => 'PUT', 'requirements' => ['apiVersion' => 'v1']],
+ // Recovered file operation controller
+ ['name' => 'recoveredFileOperation#findAll', 'url' => '/api/{apiVersion}/recovered/file-operation', 'verb' => 'GET', 'requirements' => ['apiVersion' => 'v1']],
+ ['name' => 'recoveredFileOperation#find', 'url' => '/api/{apiVersion}/recovered/file-operation/{id}', 'verb' => 'GET', 'requirements' => ['apiVersion' => 'v1']],
+ ['name' => 'recoveredFileOperation#recover', 'url' => '/api/{apiVersion}/recovered/file-operations/recover', 'verb' => 'PUT', 'requirements' => ['apiVersion' => 'v1']],
// Settings controller
['name' => 'settings#update', 'url' => '/api/{apiVersion}/settings', 'verb' => 'PUT', 'requirements' => ['apiVersion' => 'v1']],
['name' => 'settings#findAll', 'url' => '/api/{apiVersion}/settings', 'verb' => 'GET', 'requirements' => ['apiVersion' => 'v1']],