"use strict";(globalThis["webpackChunksyseye"]=globalThis["webpackChunksyseye"]||[]).push([[550],{6550:(t,e,a)=>{a.r(e),a.d(e,{default:()=>it});var i=a(3673),l=a(2323);const s={class:"row"},n=(0,i._)("div",{class:"col"},null,-1),o={class:"col"},d={class:"row q-gutter-md q-mb-sm q-pa-lg"},r={key:0},h=(0,i._)("div",{class:"bg-red-5"}," ",-1),c=(0,i.Uk)(" 分数: "),u=(0,i.Uk)(" 活动状态: "),w=(0,i.Uk)(" ATTCK命中: "),p=(0,i.Uk)(" 产生的威胁: "),A=(0,i.Uk)(" 机器学习引擎 "),m=(0,i.Uk)(" 查看详情 "),g=(0,i.Uk)(" 在VT上搜索 "),_=(0,i.Uk)(" 确认威胁 "),k=(0,i.Uk)(" 忽略威胁 "),C=(0,i.Uk)(" 删除报警 "),f=(0,i._)("div",{class:"col"},null,-1),D=(0,i._)("div",{class:"text-h6"},"填写缘由",-1),B=(0,i.Uk)("Close"),b={class:"row",style:{width:"100%",height:"100%"}},U={ref:"main_draw",style:{width:"100%",height:"100%","margin-left":"5%"}},W=(0,i.Uk)("进程命中的规则: "),Q=(0,i.Uk)(" 无 "),v=(0,i.Uk)("attck矩阵: "),y=(0,i.Uk)(" 无 ");function V(t,e,a,V,q,S){const I=(0,i.up)("q-chip"),Z=(0,i.up)("q-btn"),E=(0,i.up)("q-card-actions"),K=(0,i.up)("q-card-section"),x=(0,i.up)("q-card"),Y=(0,i.up)("q-timeline-entry"),z=(0,i.up)("q-timeline"),H=(0,i.up)("q-input"),N=(0,i.up)("q-dialog"),O=(0,i.up)("q-space"),j=(0,i.up)("q-tooltip"),F=(0,i.up)("q-bar"),L=(0,i.up)("q-item-section"),X=(0,i.up)("q-item"),J=(0,i.up)("q-separator"),P=(0,i.up)("q-list"),R=(0,i.up)("q-drawer"),T=(0,i.Q2)("close-popup");return(0,i.wg)(),(0,i.iD)(i.HY,null,[(0,i._)("div",null,[(0,i._)("div",s,[n,(0,i._)("div",o,[(0,i._)("div",d,[(0,i.Wm)(z,{layout:"dense",side:"right",color:"red"},{default:(0,i.w5)((()=>[t.server_threat.data&&0!=t.server_threat.data.length?(0,i.kq)("",!0):((0,i.wg)(),(0,i.iD)("h4",r,"暂无可用数据,下次刷新时间 "+(0,l.zw)(t.last_refresh)+"...",1)),((0,i.wg)(!0),(0,i.iD)(i.HY,null,(0,i.Ko)(t.server_threat.data,((e,a)=>((0,i.wg)(),(0,i.j4)(Y,{key:a,subtitle:"主机:"+e.host,side:"left"},{default:(0,i.w5)((()=>[(0,i._)("div",null,[(0,i.Wm)(x,{flat:"",bordered:"",style:{overflow:"auto"},"thumb-style":t.thumbStyle,"bar-style":t.barStyle},{default:(0,i.w5)((()=>[(0,i.Wm)(K,{horizontal:""},{default:(0,i.w5)((()=>[h,(0,i.Wm)(E,{vertical:"",class:"justify-around q-px-md"},{default:(0,i.w5)((()=>[(0,i._)("div",null,"进程链hash: "+(0,l.zw)(e.chain_hash),1),(0,i._)("div",null,"进程: "+(0,l.zw)(e.start_process.path),1),(0,i._)("div",null,"用户: "+(0,l.zw)(e.start_process.user),1),(0,i._)("div",null,[c,(0,i.Wm)(I,{square:"",color:"orange","text-color":"white","icon-right":"visibility"},{default:(0,i.w5)((()=>[(0,i.Uk)((0,l.zw)(e.risk_score),1)])),_:2},1024)]),(0,i._)("div",null,[u,(0,i.Wm)(I,{square:"",color:1==e.is_end?"negative":"red","text-color":"white"},{default:(0,i.w5)((()=>[(0,i.Uk)((0,l.zw)(1==e.is_end?"已结束":"进行中"),1)])),_:2},1032,["color"])]),(0,i._)("div",null,[w,((0,i.wg)(!0),(0,i.iD)(i.HY,null,(0,i.Ko)(e.attck_hit_list,((t,e)=>((0,i.wg)(),(0,i.j4)(I,{key:t,square:"",color:"rgb(239,243,246)"},{default:(0,i.w5)((()=>[(0,i.Uk)((0,l.zw)(e)+" ("+(0,l.zw)(t)+") ",1)])),_:2},1024)))),128))]),(0,i._)("div",null,[p,((0,i.wg)(!0),(0,i.iD)(i.HY,null,(0,i.Ko)(e.hit_rule,((t,e)=>((0,i.wg)(),(0,i.j4)(I,{key:t,square:"",color:"red","text-color":"white"},{default:(0,i.w5)((()=>[(0,i.Uk)((0,l.zw)(e)+" ("+(0,l.zw)(t)+") ",1)])),_:2},1024)))),128)),"{}"==JSON.stringify(e.hit_rule)?((0,i.wg)(),(0,i.j4)(I,{key:0,square:"",color:"negative","text-color":"white"},{default:(0,i.w5)((()=>[A])),_:1})):(0,i.kq)("",!0)]),(0,i._)("div",null,[(0,i.Wm)(Z,{flat:"",color:"accent",onClick:a=>t.show_details(e.id),icon:"open_in_new"},{default:(0,i.w5)((()=>[m])),_:2},1032,["onClick"]),(0,i.Wm)(Z,{flat:"",color:"accent",onClick:a=>t.search_vt(e.start_process.hash),icon:"search"},{default:(0,i.w5)((()=>[g])),_:2},1032,["onClick"]),(0,i.Wm)(Z,{flat:"",color:"accent",onClick:a=>t.handle_threat(e.id,1),icon:"done"},{default:(0,i.w5)((()=>[_])),_:2},1032,["onClick"]),(0,i.Wm)(Z,{flat:"",color:"accent",onClick:a=>t.handle_threat(e.id,2),icon:"texture"},{default:(0,i.w5)((()=>[k])),_:2},1032,["onClick"]),(0,i.Wm)(Z,{flat:"",color:"accent",icon:"close",onClick:a=>t.delete_threat(e.id)},{default:(0,i.w5)((()=>[C])),_:2},1032,["onClick"])])])),_:2},1024)])),_:2},1024)])),_:2},1032,["thumb-style","bar-style"])])])),_:2},1032,["subtitle"])))),128))])),_:1})])]),f])]),(0,i.Wm)(N,{modelValue:t.addwhiteListHash,"onUpdate:modelValue":e[3]||(e[3]=e=>t.addwhiteListHash=e),persistent:"","transition-show":"scale","transition-hide":"scale"},{default:(0,i.w5)((()=>[(0,i.Wm)(x,{style:{"min-width":"350px"}},{default:(0,i.w5)((()=>[(0,i.Wm)(K,null,{default:(0,i.w5)((()=>[D])),_:1}),(0,i.Wm)(K,{class:"q-pt-none"},{default:(0,i.w5)((()=>[(0,i.Wm)(H,{dense:"",modelValue:this.whiteListPostData.reason,"onUpdate:modelValue":e[0]||(e[0]=t=>this.whiteListPostData.reason=t),autofocus:""},null,8,["modelValue"])])),_:1}),(0,i.Wm)(E,{align:"right",class:"text-primary"},{default:(0,i.w5)((()=>[(0,i.wy)((0,i.Wm)(Z,{flat:"",label:"取消",onClick:e[1]||(e[1]=e=>t.addwhiteListHash=!1)},null,512),[[T]]),(0,i.wy)((0,i.Wm)(Z,{flat:"",label:"加入白名单",onClick:e[2]||(e[2]=e=>t.add_to_white_hash_post())},null,512),[[T]])])),_:1})])),_:1})])),_:1},8,["modelValue"]),(0,i.Wm)(N,{modelValue:t.dialog,"onUpdate:modelValue":e[8]||(e[8]=e=>t.dialog=e),persistent:"",maximized:t.maximizedToggle,"transition-show":"slide-up","transition-hide":"slide-down"},{default:(0,i.w5)((()=>[(0,i.Wm)(x,{class:"text-white"},{default:(0,i.w5)((()=>[(0,i.Wm)(F,null,{default:(0,i.w5)((()=>[(0,i.Wm)(O),(0,i.wy)(((0,i.wg)(),(0,i.j4)(Z,{dense:"",flat:"",icon:"close"},{default:(0,i.w5)((()=>[(0,i.Wm)(j,{"content-class":"bg-white text-primary"},{default:(0,i.w5)((()=>[B])),_:1})])),_:1})),[[T]])])),_:1}),(0,i._)("div",b,[(0,i._)("div",U," 1 ",512)]),t.processChainShowDetails?((0,i.wg)(),(0,i.j4)(R,{key:0,"show-if-above":"",modelValue:t.processChainShowDetails,"onUpdate:modelValue":e[7]||(e[7]=e=>t.processChainShowDetails=e),side:"right",bordered:"",width:"350",class:"text-dark"},{default:(0,i.w5)((()=>[(0,i.Wm)(P,{style:{width:"100%","word-break":"break-all"}},{default:(0,i.w5)((()=>[(0,i.Wm)(X,null,{default:(0,i.w5)((()=>[(0,i.Wm)(L,null,{default:(0,i.w5)((()=>[(0,i.Uk)("活跃状态: "+(0,l.zw)(t.processChainDetails.active?"运行中":"已结束"),1)])),_:1})])),_:1}),(0,i.Wm)(J),(0,i.Wm)(X,null,{default:(0,i.w5)((()=>[(0,i.Wm)(L,null,{default:(0,i.w5)((()=>[(0,i.Uk)("进程名字: "+(0,l.zw)(t.processChainDetails.name),1)])),_:1})])),_:1}),(0,i.Wm)(J),(0,i.Wm)(X,null,{default:(0,i.w5)((()=>[(0,i.Wm)(L,null,{default:(0,i.w5)((()=>[(0,i.Uk)("进程路径: "+(0,l.zw)(t.processChainDetails.path),1)])),_:1})])),_:1}),(0,i.Wm)(J),(0,i.Wm)(X,null,{default:(0,i.w5)((()=>[(0,i.Wm)(L,null,{default:(0,i.w5)((()=>[(0,i.Uk)("进程参数: "+(0,l.zw)(t.processChainDetails.params),1)])),_:1})])),_:1}),(0,i.Wm)(J),(0,i.Wm)(X,null,{default:(0,i.w5)((()=>[(0,i.Wm)(L,null,{default:(0,i.w5)((()=>[(0,i.Uk)("进程id: "+(0,l.zw)(t.processChainDetails.pid),1)])),_:1})])),_:1}),(0,i.Wm)(J),(0,i.Wm)(X,null,{default:(0,i.w5)((()=>[(0,i.Wm)(L,null,{default:(0,i.w5)((()=>[(0,i.Uk)("父进程id: "+(0,l.zw)(t.processChainDetails.ppid),1)])),_:1})])),_:1}),(0,i.Wm)(J),(0,i.Wm)(X,null,{default:(0,i.w5)((()=>[(0,i.Wm)(L,null,{default:(0,i.w5)((()=>[(0,i.Uk)("进程hash: "+(0,l.zw)(t.processChainDetails.md5),1)])),_:1})])),_:1}),(0,i.Wm)(J),(0,i.Wm)(X,null,{default:(0,i.w5)((()=>[(0,i.Wm)(L,null,{default:(0,i.w5)((()=>[(0,i.Uk)("是否在白名单中: "+(0,l.zw)(t.processChainDetails.isWhite?"是":"否"),1)])),_:1})])),_:1}),(0,i.Wm)(J),(0,i.Wm)(X,null,{default:(0,i.w5)((()=>[(0,i.Wm)(L,null,{default:(0,i.w5)((()=>[W,((0,i.wg)(!0),(0,i.iD)(i.HY,null,(0,i.Ko)(t.processChainDetails.hitRules,((t,e)=>((0,i.wg)(),(0,i.j4)(I,{key:t,square:"",color:"rgb(239,243,246)"},{default:(0,i.w5)((()=>[(0,i.Uk)((0,l.zw)(e)+" ("+(0,l.zw)(t)+") ",1)])),_:2},1024)))),128)),"{}"==JSON.stringify(t.processChainDetails.hitRules)?((0,i.wg)(),(0,i.j4)(I,{key:0,square:"",color:"rgb(239,243,246)"},{default:(0,i.w5)((()=>[Q])),_:1})):(0,i.kq)("",!0)])),_:1})])),_:1}),(0,i.Wm)(X,null,{default:(0,i.w5)((()=>[(0,i.Wm)(L,null,{default:(0,i.w5)((()=>[v,((0,i.wg)(!0),(0,i.iD)(i.HY,null,(0,i.Ko)(t.processChainDetails.hitAttck,((t,e)=>((0,i.wg)(),(0,i.j4)(I,{key:t,square:"",color:"rgb(239,243,246)"},{default:(0,i.w5)((()=>[(0,i.Uk)((0,l.zw)(e)+" ("+(0,l.zw)(t)+") ",1)])),_:2},1024)))),128)),"{}"==JSON.stringify(t.processChainDetails.hitAttck)?((0,i.wg)(),(0,i.j4)(I,{key:0,square:"",color:"rgb(239,243,246)"},{default:(0,i.w5)((()=>[y])),_:1})):(0,i.kq)("",!0)])),_:1})])),_:1}),(0,i.Wm)(X,null,{default:(0,i.w5)((()=>[(0,i.Wm)(Z,{icon:"search",outline:"",style:{color:"grey",width:"100%"},label:"搜索hash",onClick:e[4]||(e[4]=e=>t.search_vt(t.processChainDetails.md5))})])),_:1}),(0,i.Wm)(X,null,{default:(0,i.w5)((()=>[0==t.processChainDetails.isWhite?((0,i.wg)(),(0,i.j4)(Z,{key:0,icon:"texture",outline:"",style:{color:"grey",width:"100%"},label:"加入白名单",onClick:e[5]||(e[5]=e=>t.add_to_white_hash_pre(t.processChainDetails.path,t.processChainDetails.md5))})):((0,i.wg)(),(0,i.j4)(Z,{key:1,icon:"clear",outline:"",style:{color:"grey",width:"100%"},label:"从白名单中删除",onClick:e[6]||(e[6]=e=>t.delete_white_hash(t.processChainDetails.md5))}))])),_:1})])),_:1})])),_:1},8,["modelValue"])):(0,i.kq)("",!0)])),_:1})])),_:1},8,["modelValue","maximized"])],64)}var q=a(52),S=a.n(q),I=a(2256);const Z=(0,i.aZ)({name:"PageIndex",data:function(){return{addwhiteListHash:!1,whiteListPostData:{path:"",hash:"",reason:""},processChainShowDetails:!1,last_refresh:360,processChainDetails:{hash:"",prams:"",hitRules:[],hitAttck:[],isWhite:!1,whiteListReason:""},thumbStyle:{right:"4px",borderRadius:"5px",backgroundColor:"#027be3",width:"5px",opacity:.75},barStyle:{right:"2px",borderRadius:"9px",backgroundColor:"#027be3",width:"9px",opacity:.2},dialog:!1,maximizedToggle:!0,server_threat:{},select_chain_data:{}}},methods:{delete_white_hash(t){S().get("/api/v1/del/white_list?hash="+t).then((t=>{this.processChainDetails.isWhite=!1}))},query_white_hash(t){S().get("/api/v1/query/white_list?hash="+t).then((t=>{this.processChainDetails.isWhite=1===t.data.result}))},add_to_white_hash_pre(t,e){this.whiteListPostData={path:t,hash:e,reason:""},this.addwhiteListHash=!0,console.log("addwhiteListHash",this.addwhiteListHash)},add_to_white_hash_post(){S().post("/api/v1/set/white_list",this.whiteListPostData).then((t=>{this.processChainDetails.isWhite=!0}))},set_chain_data(t){if(t.path){const e=t.path.split("\\");t.name=e[e.length-1],console.log(t.name);for(const a in t.children)this.set_chain_data(t.children[a])}},draw_tree(){this.set_chain_data(this.select_chain_data);const t=this.$refs.main_draw,e=I.S1(t),a={tooltip:{trigger:"item",triggerOn:"mousemove",formatter:function(t){const e=t.data;let a="