зеркало из https://github.com/mozilla/MozDef.git
unauth_ssh_pyes: allow additional characters in username
This commit is contained in:
Родитель
9ffebc632b
Коммит
1f4799eeb8
|
@ -68,7 +68,7 @@ class AlertUnauthSSH(AlertTask):
|
|||
sourceipaddress = x['details']['sourceipaddress']
|
||||
|
||||
targetuser = 'unknown'
|
||||
expr = re.compile('Accepted publickey for ([A-Za-z0-9]+) from')
|
||||
expr = re.compile('Accepted publickey for ([A-Za-z0-9@.\-]+) from')
|
||||
m = expr.match(event['_source']['summary'])
|
||||
groups = m.groups()
|
||||
if len(groups) > 0:
|
||||
|
|
Загрузка…
Ссылка в новой задаче