Add eliminate package with functions for removing suspicious artifacts (files, directories, processes, services, scheduled tasks) and enhance detection logic to include whitelist checks and multi-indicator scoring
This commit is contained in:
@@ -0,0 +1,12 @@
|
||||
package eliminate
|
||||
|
||||
import (
|
||||
. "rmm-hunter/internal/suspicious"
|
||||
|
||||
scurvy "github.com/Kraken-OffSec/Scurvy"
|
||||
)
|
||||
|
||||
// EliminateService stops and removes a service from the system
|
||||
func EliminateService(s Service) error {
|
||||
return scurvy.RemoveService(s.Name)
|
||||
}
|
||||
Reference in New Issue
Block a user