Add eliminate package with functions for removing suspicious artifacts (files, directories, processes, services, scheduled tasks) and enhance detection logic to include whitelist checks and multi-indicator scoring

This commit is contained in:
Evan Hosinski committed 2025-10-11 17:22:44 -04:00
1 parent e835629643
commit b855f0eaec
15 files changed
+346 -114

No files matched your search

-6
View File
@@ -50,12 +50,6 @@ AutoRun
The object used to resemble the auto run methods used by the Suspicious software.
*/
type AutoRun struct {
//Name string `json:"name"`
//Command string `json:"command"`
//Location string `json:"location"`
//Enabled bool `json:"enabled"`
//Description string `json:"description"`
Type string `json:"type"`
Location string `json:"location"`
ImagePath string `json:"image_path"`