Function StartMenuAnalysisRoutine

windowslnkparser.go:14–37

StartMenuAnalysisRoutine analyse system artefacts every 15 seconds

(pQuarantine string, pKill bool, pNotifications bool, pVerbose bool, pInfiniteLoop bool, rules *yara.Rules)

// StartMenuAnalysisRoutine analyse system artefacts every 15 seconds
func StartMenuAnalysisRoutine(pQuarantine string, pKill bool, pNotifications bool, pVerbose bool, pInfiniteLoop bool, rules *yara.Rules) {
	for {
		lnk, errors := ListStartMenuLnkPersistence(pVerbose)
		if errors != nil && pVerbose {
			for _, err := range errors {
				logMessage(LOG_ERROR, "[ERROR]", err)
			}
		}

		for _, l := range lnk {
			paths := FormatPathFromComplexString(l)
			for _, p := range paths {
				FileAnalysis(p, pQuarantine, pKill, pNotifications, pVerbose, rules, "STARTMENU")
			}
		}

		if !pInfiniteLoop {
			wg.Done()
			break
		} else {
			time.Sleep(15 * time.Second)
		}
	}
}

// ListStartMenuFolders return a []string of all available StartMenu folders
func ListStartMenuFolders(verbose bool) (startMenu []string, err error) {