KrakenTech/RMM-Hunter
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Refine AutoRun logging to display key counts, remove redundant entry count log

Browse Source
This commit is contained in:
Evan Hosinski
2025-10-10 17:01:14 -04:00
parent 7cdee4b62c
commit d28b8b1211
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/pkg/hunt/detect/autorun/autorun.go
+2 -1
View File
@@ -32,6 +32,8 @@ func Detect() []AutoRun {
roots := []registry.Key{registry.LOCAL_MACHINE, registry.CURRENT_USER} roots := []registry.Key{registry.LOCAL_MACHINE, registry.CURRENT_USER}
rootNames := []string{"HKLM", "HKCU"} rootNames := []string{"HKLM", "HKCU"}
fmt.Printf(" [>] Dispositioning %d AutoRun Keys\n", len(autorunKeys)*len(roots))
totalEntries := 0 totalEntries := 0
for i, root := range roots { for i, root := range roots {
for _, keyPath := range autorunKeys { for _, keyPath := range autorunKeys {
@@ -41,7 +43,6 @@ func Detect() []AutoRun {
} }
} }
fmt.Printf(" [>] Dispositioning %d AutoRun Entries\n", totalEntries)
fmt.Printf("[+] Found %d Suspicious AutoRun Applications\n", len(suspiciousAutoRuns)) fmt.Printf("[+] Found %d Suspicious AutoRun Applications\n", len(suspiciousAutoRuns))
return suspiciousAutoRuns return suspiciousAutoRuns