"use strict";(globalThis["webpackChunksyseye"]=globalThis["webpackChunksyseye"]||[]).push([[698],{698:(t,e,a)=>{a.r(e),a.d(e,{default:()=>at});var i=a(3673),l=a(2323);const s={class:"q-gutter-md q-mb-sm q-pa-lg"},o={class:"row q-col-gutter-sm"},n={class:"row"},d=(0,i._)("div",{class:"col"},null,-1),r={class:"col"},h={class:"row q-gutter-md q-mb-sm q-pa-lg"},c={key:0},u=(0,i._)("div",{class:"bg-red-5"}," ",-1),p=(0,i.Uk)(" 分数: "),w=(0,i.Uk)(" 活动状态: "),m=(0,i.Uk)(" 产生的威胁: "),A=(0,i.Uk)(" 查看详情 "),g=(0,i.Uk)(" 在VT上搜索 "),_=(0,i.Uk)(" 确认威胁 "),C=(0,i.Uk)(" 忽略威胁 "),f=(0,i.Uk)(" 删除报警 "),k=(0,i._)("div",{class:"col"},null,-1),b=(0,i._)("div",{class:"text-h6"},"填写缘由",-1),v=(0,i.Uk)("Close"),W={class:"row",style:{width:"100%",height:"100%"}},B={ref:"main_draw",style:{width:"100%",height:"100%","margin-left":"5%"}},D=(0,i.Uk)("进程命中的规则: ");function Q(t,e,a,Q,U,q){const y=(0,i.up)("q-icon"),V=(0,i.up)("q-item-section"),S=(0,i.up)("q-item-label"),I=(0,i.up)("q-item"),x=(0,i.up)("q-card-section"),Z=(0,i.up)("q-card"),E=(0,i.up)("q-chip"),K=(0,i.up)("q-btn"),Y=(0,i.up)("q-card-actions"),z=(0,i.up)("q-timeline-entry"),H=(0,i.up)("q-timeline"),F=(0,i.up)("q-input"),N=(0,i.up)("q-dialog"),j=(0,i.up)("q-space"),L=(0,i.up)("q-tooltip"),O=(0,i.up)("q-bar"),X=(0,i.up)("q-separator"),T=(0,i.up)("q-list"),P=(0,i.up)("q-drawer"),J=(0,i.Q2)("close-popup");return(0,i.wg)(),(0,i.iD)(i.HY,null,[(0,i._)("div",null,[(0,i._)("div",s,[(0,i.Wm)(Z,{class:"bg-transparent no-shadow no-border"},{default:(0,i.w5)((()=>[(0,i.Wm)(x,{class:"q-pa-none"},{default:(0,i.w5)((()=>[(0,i._)("div",o,[((0,i.wg)(!0),(0,i.iD)(i.HY,null,(0,i.Ko)(t.Threatitems,((t,e)=>((0,i.wg)(),(0,i.iD)("div",{key:e,class:"col-md-3 col-sm-12 col-xs-12"},[(0,i.Wm)(I,{style:(0,l.j5)(`background-color: ${t.color1}`),class:"q-pa-none"},{default:(0,i.w5)((()=>[(0,i.Wm)(V,{side:"",style:(0,l.j5)(`background-color: ${t.color2}`),class:"q-pa-lg q-mr-none text-white"},{default:(0,i.w5)((()=>[(0,i.Wm)(y,{name:t.icon,color:"white",size:"24px"},null,8,["name"])])),_:2},1032,["style"]),(0,i.Wm)(V,{class:"q-pa-md q-ml-none text-white"},{default:(0,i.w5)((()=>[(0,i.Wm)(S,{class:"text-white text-h6 text-weight-bolder"},{default:(0,i.w5)((()=>[(0,i.Uk)((0,l.zw)(t.value),1)])),_:2},1024),(0,i.Wm)(S,null,{default:(0,i.w5)((()=>[(0,i.Uk)((0,l.zw)(t.title),1)])),_:2},1024)])),_:2},1024)])),_:2},1032,["style"])])))),128))])])),_:1})])),_:1})]),(0,i._)("div",n,[d,(0,i._)("div",r,[(0,i._)("div",h,[(0,i.Wm)(H,{layout:"dense",side:"right",color:"red"},{default:(0,i.w5)((()=>[t.server_threat.data&&0!=t.server_threat.data.length?(0,i.kq)("",!0):((0,i.wg)(),(0,i.iD)("h4",c,"暂无可用数据,下次刷新时间 "+(0,l.zw)(t.last_refresh)+"...",1)),((0,i.wg)(!0),(0,i.iD)(i.HY,null,(0,i.Ko)(t.server_threat.data,((e,a)=>((0,i.wg)(),(0,i.j4)(z,{key:a,subtitle:"主机:"+e.host,side:"left"},{default:(0,i.w5)((()=>[(0,i._)("div",null,[(0,i.Wm)(Z,{flat:"",bordered:"",style:{overflow:"auto"},"thumb-style":t.thumbStyle,"bar-style":t.barStyle},{default:(0,i.w5)((()=>[(0,i.Wm)(x,{horizontal:""},{default:(0,i.w5)((()=>[u,(0,i.Wm)(Y,{vertical:"",class:"justify-around q-px-md"},{default:(0,i.w5)((()=>[(0,i._)("div",null,"进程链hash: "+(0,l.zw)(e.chain_hash),1),(0,i._)("div",null,"进程: "+(0,l.zw)(e.start_process.path),1),(0,i._)("div",null,"用户: "+(0,l.zw)(e.start_process.user),1),(0,i._)("div",null,[p,(0,i.Wm)(E,{square:"",color:"orange","text-color":"white","icon-right":"visibility"},{default:(0,i.w5)((()=>[(0,i.Uk)((0,l.zw)(e.risk_score),1)])),_:2},1024)]),(0,i._)("div",null,[w,(0,i.Wm)(E,{square:"",color:1==e.is_end?"negative":"red","text-color":"white"},{default:(0,i.w5)((()=>[(0,i.Uk)((0,l.zw)(1==e.is_end?"已结束":"进行中"),1)])),_:2},1032,["color"])]),(0,i._)("div",null,[m,((0,i.wg)(!0),(0,i.iD)(i.HY,null,(0,i.Ko)(e.hit_rule,((t,e)=>((0,i.wg)(),(0,i.j4)(E,{key:t,square:"",color:"rgb(239,243,246)"},{default:(0,i.w5)((()=>[(0,i.Uk)((0,l.zw)(e)+" ("+(0,l.zw)(t)+") ",1)])),_:2},1024)))),128))]),(0,i._)("div",null,[(0,i.Wm)(K,{flat:"",color:"accent",onClick:a=>t.show_details(e.id),icon:"open_in_new"},{default:(0,i.w5)((()=>[A])),_:2},1032,["onClick"]),(0,i.Wm)(K,{flat:"",color:"accent",onClick:a=>t.search_vt(e.start_process.hash),icon:"search"},{default:(0,i.w5)((()=>[g])),_:2},1032,["onClick"]),(0,i.Wm)(K,{flat:"",color:"accent",onClick:a=>t.handle_threat(e.id,1),icon:"done"},{default:(0,i.w5)((()=>[_])),_:2},1032,["onClick"]),(0,i.Wm)(K,{flat:"",color:"accent",onClick:a=>t.handle_threat(e.id,2),icon:"texture"},{default:(0,i.w5)((()=>[C])),_:2},1032,["onClick"]),(0,i.Wm)(K,{flat:"",color:"accent",icon:"close",onClick:a=>t.delete_threat(e.id)},{default:(0,i.w5)((()=>[f])),_:2},1032,["onClick"])])])),_:2},1024)])),_:2},1024)])),_:2},1032,["thumb-style","bar-style"])])])),_:2},1032,["subtitle"])))),128))])),_:1})])]),k])]),(0,i.Wm)(N,{modelValue:t.addwhiteListHash,"onUpdate:modelValue":e[3]||(e[3]=e=>t.addwhiteListHash=e),persistent:"","transition-show":"scale","transition-hide":"scale"},{default:(0,i.w5)((()=>[(0,i.Wm)(Z,{style:{"min-width":"350px"}},{default:(0,i.w5)((()=>[(0,i.Wm)(x,null,{default:(0,i.w5)((()=>[b])),_:1}),(0,i.Wm)(x,{class:"q-pt-none"},{default:(0,i.w5)((()=>[(0,i.Wm)(F,{dense:"",modelValue:this.whiteListPostData.reason,"onUpdate:modelValue":e[0]||(e[0]=t=>this.whiteListPostData.reason=t),autofocus:""},null,8,["modelValue"])])),_:1}),(0,i.Wm)(Y,{align:"right",class:"text-primary"},{default:(0,i.w5)((()=>[(0,i.wy)((0,i.Wm)(K,{flat:"",label:"取消",onClick:e[1]||(e[1]=e=>t.addwhiteListHash=!1)},null,512),[[J]]),(0,i.wy)((0,i.Wm)(K,{flat:"",label:"加入白名单",onClick:e[2]||(e[2]=e=>t.add_to_white_hash_post())},null,512),[[J]])])),_:1})])),_:1})])),_:1},8,["modelValue"]),(0,i.Wm)(N,{modelValue:t.dialog,"onUpdate:modelValue":e[8]||(e[8]=e=>t.dialog=e),persistent:"",maximized:t.maximizedToggle,"transition-show":"slide-up","transition-hide":"slide-down"},{default:(0,i.w5)((()=>[(0,i.Wm)(Z,{class:"text-white"},{default:(0,i.w5)((()=>[(0,i.Wm)(O,null,{default:(0,i.w5)((()=>[(0,i.Wm)(j),(0,i.wy)(((0,i.wg)(),(0,i.j4)(K,{dense:"",flat:"",icon:"close"},{default:(0,i.w5)((()=>[(0,i.Wm)(L,{"content-class":"bg-white text-primary"},{default:(0,i.w5)((()=>[v])),_:1})])),_:1})),[[J]])])),_:1}),(0,i._)("div",W,[(0,i._)("div",B," 1 ",512)]),t.processChainShowDetails?((0,i.wg)(),(0,i.j4)(P,{key:0,"show-if-above":"",modelValue:t.processChainShowDetails,"onUpdate:modelValue":e[7]||(e[7]=e=>t.processChainShowDetails=e),side:"right",bordered:"",width:"350",class:"text-dark"},{default:(0,i.w5)((()=>[(0,i.Wm)(T,{style:{width:"100%","word-break":"break-all"}},{default:(0,i.w5)((()=>[(0,i.Wm)(I,null,{default:(0,i.w5)((()=>[(0,i.Wm)(V,null,{default:(0,i.w5)((()=>[(0,i.Uk)("活跃状态: "+(0,l.zw)(t.processChainDetails.active?"运行中":"已结束"),1)])),_:1})])),_:1}),(0,i.Wm)(X),(0,i.Wm)(I,null,{default:(0,i.w5)((()=>[(0,i.Wm)(V,null,{default:(0,i.w5)((()=>[(0,i.Uk)("进程名字: "+(0,l.zw)(t.processChainDetails.name),1)])),_:1})])),_:1}),(0,i.Wm)(X),(0,i.Wm)(I,null,{default:(0,i.w5)((()=>[(0,i.Wm)(V,null,{default:(0,i.w5)((()=>[(0,i.Uk)("进程路径: "+(0,l.zw)(t.processChainDetails.path),1)])),_:1})])),_:1}),(0,i.Wm)(X),(0,i.Wm)(I,null,{default:(0,i.w5)((()=>[(0,i.Wm)(V,null,{default:(0,i.w5)((()=>[(0,i.Uk)("进程参数: "+(0,l.zw)(t.processChainDetails.params),1)])),_:1})])),_:1}),(0,i.Wm)(X),(0,i.Wm)(I,null,{default:(0,i.w5)((()=>[(0,i.Wm)(V,null,{default:(0,i.w5)((()=>[(0,i.Uk)("进程id: "+(0,l.zw)(t.processChainDetails.pid),1)])),_:1})])),_:1}),(0,i.Wm)(X),(0,i.Wm)(I,null,{default:(0,i.w5)((()=>[(0,i.Wm)(V,null,{default:(0,i.w5)((()=>[(0,i.Uk)("父进程id: "+(0,l.zw)(t.processChainDetails.ppid),1)])),_:1})])),_:1}),(0,i.Wm)(X),(0,i.Wm)(I,null,{default:(0,i.w5)((()=>[(0,i.Wm)(V,null,{default:(0,i.w5)((()=>[(0,i.Uk)("进程hash: "+(0,l.zw)(t.processChainDetails.md5),1)])),_:1})])),_:1}),(0,i.Wm)(X),(0,i.Wm)(I,null,{default:(0,i.w5)((()=>[(0,i.Wm)(V,null,{default:(0,i.w5)((()=>[(0,i.Uk)("是否在白名单中: "+(0,l.zw)(t.processChainDetails.isWhite?"是":"否"),1)])),_:1})])),_:1}),(0,i.Wm)(X),(0,i.Wm)(I,null,{default:(0,i.w5)((()=>[(0,i.Wm)(V,null,{default:(0,i.w5)((()=>[D,((0,i.wg)(!0),(0,i.iD)(i.HY,null,(0,i.Ko)(t.processChainDetails.hitRules,((t,e)=>((0,i.wg)(),(0,i.j4)(E,{key:t,square:"",color:"rgb(239,243,246)"},{default:(0,i.w5)((()=>[(0,i.Uk)((0,l.zw)(e)+" ("+(0,l.zw)(t)+") ",1)])),_:2},1024)))),128))])),_:1})])),_:1}),(0,i.Wm)(I,null,{default:(0,i.w5)((()=>[(0,i.Wm)(K,{icon:"search",outline:"",style:{color:"grey",width:"100%"},label:"搜索hash",onClick:e[4]||(e[4]=e=>t.search_vt(t.processChainDetails.md5))})])),_:1}),(0,i.Wm)(I,null,{default:(0,i.w5)((()=>[0==t.processChainDetails.isWhite?((0,i.wg)(),(0,i.j4)(K,{key:0,icon:"texture",outline:"",style:{color:"grey",width:"100%"},label:"加入白名单",onClick:e[5]||(e[5]=e=>t.add_to_white_hash_pre(t.processChainDetails.path,t.processChainDetails.md5))})):((0,i.wg)(),(0,i.j4)(K,{key:1,icon:"clear",outline:"",style:{color:"grey",width:"100%"},label:"从白名单中删除",onClick:e[6]||(e[6]=e=>t.delete_white_hash(t.processChainDetails.md5))}))])),_:1})])),_:1})])),_:1},8,["modelValue"])):(0,i.kq)("",!0)])),_:1})])),_:1},8,["modelValue","maximized"])],64)}var U=a(52),q=a.n(U),y=a(2256);const V=(0,i.aZ)({name:"PageIndex",data:function(){return{addwhiteListHash:!1,whiteListPostData:{path:"",hash:"",reason:""},processChainShowDetails:!1,last_refresh:360,processChainDetails:{hash:"",prams:"",hitRule:[],isWhite:!1,whiteListReason:""},thumbStyle:{right:"4px",borderRadius:"5px",backgroundColor:"#027be3",width:"5px",opacity:.75},barStyle:{right:"2px",borderRadius:"9px",backgroundColor:"#027be3",width:"9px",opacity:.2},threatStatistics:{all:1,confirm:0,ingore:1,working:0},Threatitems:[{title:"发现的威胁",icon:"remove_red_eye",value:"200",color1:"#5064b5",color2:"#3e51b5"},{title:"确认的威胁",icon:"flash_on",value:"500",color1:"#f37169",color2:"#f34636"},{title:"忽略的威胁",icon:"texture",value:"50",color1:"#ea6a7f",color2:"#ea4b64"},{title:"进行中的威胁",icon:"bar_chart",value:"1020",color1:"#a270b1",color2:"#9f52b1"}],dialog:!1,maximizedToggle:!0,server_threat:{},select_chain_data:{}}},methods:{delete_white_hash(t){q().get("/api/v1/del/white_list?hash="+t).then((t=>{this.processChainDetails.isWhite=!1}))},query_white_hash(t){q().get("/api/v1/query/white_list?hash="+t).then((t=>{this.processChainDetails.isWhite=1===t.data.result}))},add_to_white_hash_pre(t,e){this.whiteListPostData={path:t,hash:e,reason:""},this.addwhiteListHash=!0,console.log("addwhiteListHash",this.addwhiteListHash)},add_to_white_hash_post(){q().post("/api/v1/set/white_list",this.whiteListPostData).then((t=>{this.processChainDetails.isWhite=!0}))},set_chain_data(t){if(t.path){const e=t.path.split("\\");t.name=e[e.length-1],console.log(t.name);for(const a in t.children)this.set_chain_data(t.children[a])}},draw_tree(){this.set_chain_data(this.select_chain_data);const t=this.$refs.main_draw,e=y.S1(t),a={tooltip:{trigger:"item",triggerOn:"mousemove",formatter:function(t){const e=t.data;let a="