use of fvarrui.sysadmin.challenger.command.ExecutionResult in project Challenger4SysAdmins by fvarrui.
the class PSMonitor method doWork.
@Override
public void doWork() {
String resolveUsernameCommand = "";
Command resolveUsername = new PSCommand("(Get-LocalUser | Where SID -eq '%s').Name");
ZonedDateTime dateTime = ZonedDateTime.now(ZoneOffset.UTC);
Chronometer chrono = new Chronometer();
do {
chrono.init();
ExecutionResult result = command.execute(dateTime.toString());
if (!result.getOutput().isEmpty()) {
String xml = "<Events>" + result.getOutput() + "</Events>";
Document doc = XMLUtils.stringToDocument(xml);
NodeList nodes = doc.getElementsByTagName("Event");
for (int i = 0; i < nodes.getLength(); i++) {
Node node = nodes.item(i);
String command = XMLUtils.searchText(node, "EventData/Data[@Name='ScriptBlockText']");
String userId = XMLUtils.searchAttribute(node, "System/Security", "UserID");
String xmlDateTime = XMLUtils.searchAttribute(node, "System/TimeCreated", "SystemTime");
ZonedDateTime timestamp = DateTimeUtils.xmlInstantToZonedDateTime(xmlDateTime);
if (!getExcludedCommands().contains(command) && !command.equals(resolveUsernameCommand)) {
ExecutionResult usernameResult = resolveUsername.execute(userId);
resolveUsernameCommand = usernameResult.getParams();
String username = usernameResult.getOutput();
Map<String, Object> data = new HashMap<>();
data.put(COMMAND, command);
data.put(USERNAME, username);
data.put(TIMESTAMP, LocalDateTime.ofInstant(timestamp.toInstant(), ZoneId.systemDefault()));
notifyAll(data);
}
dateTime = timestamp;
}
}
chrono.stop();
Sleep.millis(delay - chrono.getDiff());
} while (!isStopped());
}
use of fvarrui.sysadmin.challenger.command.ExecutionResult in project Challenger4SysAdmins by fvarrui.
the class BASHMonitor method doWork.
@Override
public void doWork() {
try {
System.out.println("ejecutando comando: " + command.getCommand());
ExecutionResult result = command.execute(false);
BufferedReader reader = new BufferedReader(new InputStreamReader(result.getOutputStream()));
System.out.println("iniciando bucle");
while (!isStopped()) {
if (reader.ready()) {
String line = reader.readLine();
if (line != null) {
System.out.println("linea: " + line);
Matcher matcher = pattern.matcher(line);
if (matcher.find()) {
String time = matcher.group(1);
String username = matcher.group(2);
String command = matcher.group(3);
if (!getExcludedCommands().contains(command)) {
LocalDateTime timestamp = LocalDateTime.of(LocalDate.now(), LocalTime.parse(time));
Map<String, Object> data = new HashMap<>();
data.put(COMMAND, command);
data.put(USERNAME, username);
data.put(TIMESTAMP, timestamp);
notifyAll(data);
}
}
}
}
}
System.out.println("fin del bucle");
} catch (IOException e) {
e.printStackTrace();
}
}
Aggregations