Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Request for example of log output for an infected device in documentation #314

Open
ajjrice opened this issue Nov 7, 2022 · 2 comments
Open
Labels
documentation Improvements or additions to documentation

Comments

@ajjrice
Copy link

ajjrice commented Nov 7, 2022

I managed to embarass myself by mistaking the output of the script loading the .STIX2 files as and indication that the device was infected i.e.

INFO [mvt.ios.cmd_check_backup] Extracted 1547 indicators for collection with name "Pegasus"
...

I think it would be really helpful to include a visual example of what the log output for an infected device looks like at the end of the "Check a backup with mvt-ios" documentation page.

https://docs.mvt.re/en/latest/ios/backup/check/

e.g an image like this

https://teguh.co/static/99db988b40d1f3994f06983d8baee869/37ff2/iosfinal.png

And/or possibly to include a line at the very end of the log output that either says that some evidence of malware was found, or to confirm that no evidence was found and the device can be trusted.

@ingobaab
Copy link

Absolutely. I scanned also my backp - and now I do not know anything! Please give some instructions, - or example-output. I wanted to know, if my iphone is infected or not (!) Thats all. How?!?!?

@Te-k Te-k added the documentation Improvements or additions to documentation label Feb 21, 2023
@seiz
Copy link

seiz commented May 20, 2023

Why not clearly indicate infection Status as the last line that gets logged to STDOUT? I.e. „No infection found.“ or „Found a possible infection with Pegasus“ etc.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation
Projects
None yet
Development

No branches or pull requests

4 participants