Add eliminate package with functions for removing suspicious artifacts (files, directories, processes, services, scheduled tasks) and enhance detection logic to include whitelist checks and multi-indicator scoring
This commit is contained in:
@@ -50,12 +50,6 @@ AutoRun
|
||||
The object used to resemble the auto run methods used by the Suspicious software.
|
||||
*/
|
||||
type AutoRun struct {
|
||||
//Name string `json:"name"`
|
||||
//Command string `json:"command"`
|
||||
//Location string `json:"location"`
|
||||
//Enabled bool `json:"enabled"`
|
||||
//Description string `json:"description"`
|
||||
|
||||
Type string `json:"type"`
|
||||
Location string `json:"location"`
|
||||
ImagePath string `json:"image_path"`
|
||||
|
||||
Reference in New Issue
Block a user