Add AV #76 #75

2023-08-11 05:36:56 -04:00 · 2023-08-11 05:36:56 -04:00 · e38d922913
parent 790452e227
commit e38d922913
1 changed files with 42 additions and 0 deletions
--- a/cme/modules/enum_av.py
+++ b/cme/modules/enum_av.py
@ -399,5 +399,47 @@ conf = {
                {"name": "sophoslivequery_*", "processes": [""]},
            ],
        },
+        {
+            "name": "G DATA Security Client",
+            "services": [
+                {
+                    "name": "AVKWCtl",
+                    "description": "Anti-virus Kit Window Control",
+                },
+                {
+                    "name": "AVKProxy", 
+                    "description": "G Data AntiVirus Proxy Service"
+                },
+                {
+                    "name": "GDScan",
+                    "description": "GDSG Data AntiVirus Scan Service",
+                },
+            ],
+            "pipes": [
+                {
+                    "name": "exploitProtectionIPC",
+                    "processes": ["AVKWCtlx64.exe"],
+                }
+            ],
+        },
+        {
+            "name": "Trend Micro Endpoint",
+            "services": [
+                {
+                    "name": "TODO",
+                    "description": "Trend Micro Endpoint Basecamp",
+                }
+            ],
+            "pipes": [
+                {
+                    "name": "AMSP_LogServer",
+                    "processes": [""],
+                },
+                {
+                    "name": "Log_ServerNamePipe",
+                    "processes": [""],
+                }
+            ],
+        },
    ]
 }