Lvl4Sword / Killer

🔪 System tamper detector for USB, Bluetooth, AC, Battery, Disk Tray, and Ethernet.
https://pypi.org/project/killer/
GNU Affero General Public License v3.0
71 stars 11 forks source link

expand on lsusb [Linux] #2

Closed Lvl4Sword closed 2 years ago

Lvl4Sword commented 5 years ago
import subprocess
import re
a = re.compile(r'\bID \S+ (.+)')
b = re.findall(a, subprocess.check_output('lsusb', shell=False).decode('utf-8'))
print([each.strip() for each in b])

Would like to follow more than device ids and this is a good start.

Lvl4Sword commented 5 years ago

I'm not sure if this is actually needed. Would like more input and any potential use cases

Lvl4Sword commented 5 years ago

@GhostofGoes Do we need this? Would make readability on the whitelists better, but I don't see it helping security.

GhostofGoes commented 5 years ago

Remind me what this is again?

Lvl4Sword commented 5 years ago

Names of USB devices detected. Something like Linux Foundation 2.0 root hub

Lvl4Sword commented 2 years ago

I don't think this is needed