fix(nanodump): handle errors for nanodump better

main
Marshall Hallenbeck 2023-03-12 03:23:30 -04:00
parent 00d45c1514
commit 0c3401e9e1
1 changed files with 5 additions and 2 deletions

View File

@ -171,12 +171,15 @@ class CMEModule:
try:
credentials = []
credz_bh = []
pypy_parse = pypykatz.parse_minidump_external(dump)
try:
pypy_parse = pypykatz.parse_minidump_external(dump)
except Exception as e:
pypy_parse = None
context.log.error(f'Error parsing minidump: {e}')
ssps = ['msv_creds', 'wdigest_creds', 'ssp_creds', 'livessp_creds', 'kerberos_creds', 'credman_creds',
'tspkg_creds']
for luid in pypy_parse.logon_sessions:
for ssp in ssps:
for cred in getattr(pypy_parse.logon_sessions[luid], ssp, []):
domain = getattr(cred, "domainname", None)