undo-ransomware / ransomware_detection

lib/Analyzer/FileCorruptionAnalyzer.php

Indentation +12 added lines, -12 removed lines

@@ -94,22 +94,22 @@
                     }
                     // starting byte sequence
                     if (array_key_exists('starting', $signature['signature'])) {
-						foreach ($signature['signature']['starting']['bytes'] as $bytes) {
-							if (preg_match($bytes, strtolower(bin2hex(substr($data, $signature['signature']['starting']['offset'], strlen($bytes) / 2))))) {
-									$isFileCorrupted = false;
-							}
-						}
+                        foreach ($signature['signature']['starting']['bytes'] as $bytes) {
+                            if (preg_match($bytes, strtolower(bin2hex(substr($data, $signature['signature']['starting']['offset'], strlen($bytes) / 2))))) {
+                                    $isFileCorrupted = false;
+                            }
+                        }
                     }
                     // trailing byte sequence
                     if (array_key_exists('trailing', $signature['signature'])) {
                         $trailingIsNotMatching = true;
-						foreach ($signature['signature']['trailing']['bytes'] as $bytes) {
-							$trailingOffset = strlen($data) - $signature['signature']['trailing']['offset'] - strlen($bytes) / 2;
-							if (preg_match($bytes, strtolower(bin2hex(substr($data, $trailingOffset, strlen($bytes) / 2))))) {
-									$trailingIsNotMatching = false;
-							}
-						}
-						$isFileCorrupted = $isFileCorrupted || $trailingIsNotMatching;
+                        foreach ($signature['signature']['trailing']['bytes'] as $bytes) {
+                            $trailingOffset = strlen($data) - $signature['signature']['trailing']['offset'] - strlen($bytes) / 2;
+                            if (preg_match($bytes, strtolower(bin2hex(substr($data, $trailingOffset, strlen($bytes) / 2))))) {
+                                    $trailingIsNotMatching = false;
+                            }
+                        }
+                        $isFileCorrupted = $isFileCorrupted || $trailingIsNotMatching;
                         return new FileCorruptionResult($isFileCorrupted);
                     }
                     return new FileCorruptionResult($isFileCorrupted);

lib/Analyzer/EntropyFunnellingAnalyzer.php

Indentation +19 added lines, -19 removed lines

@@ -144,23 +144,23 @@
         return 0.0;
     }
 
-     /**
-      * Calculates the median of an array.
-      *
-      * @param  array $array
-      *
-      * @return float
-      */
-     public function median($array)
-     {
-         if (is_array($array) && count($array) > 0) {
-             $count = count($array);
-             sort($array);
-             $mid = floor(($count - 1) / 2);
-
-             return ($array[$mid] + $array[$mid + 1 - $count % 2]) / 2;
-         }
-
-         return 0.0;
-     }
+        /**
+         * Calculates the median of an array.
+         *
+         * @param  array $array
+         *
+         * @return float
+         */
+        public function median($array)
+        {
+            if (is_array($array) && count($array) > 0) {
+                $count = count($array);
+                sort($array);
+                $mid = floor(($count - 1) / 2);
+
+                return ($array[$mid] + $array[$mid + 1 - $count % 2]) / 2;
+            }
+
+            return 0.0;
+        }
 }

lib/Events/FilesEvents.php

Indentation +27 added lines, -27 removed lines

@@ -27,7 +27,7 @@ 
 
 class FilesEvents {
 
-	/** @var string */
+    /** @var string */
     private $userId;
     
     /** @var ILogger */
@@ -37,74 +37,74 @@ 
     private $monitor;
 
 
-	/**
+    /**
      * @param ILogger   $logger
      * @param Monitor   $monitor
-	 * @param string    $userId
-	 */
-	public function __construct(
+     * @param string    $userId
+     */
+    public function __construct(
         ILogger $logger,
         Monitor $monitor,
         $userId
 
-	) {
+    ) {
         $this->logger = $logger;
         $this->monitor = $monitor;
-		$this->userId = $userId;
-	}
+        $this->userId = $userId;
+    }
 
-	/**
-	 * @param array $params
-	 */
-	public function onFileUpdate(array $params) {
+    /**
+     * @param array $params
+     */
+    public function onFileUpdate(array $params) {
         $this->logger->debug("Updating ".$params['path'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['path']], Monitor::WRITE);
-	}
+    }
 
 
-	/**
-	 * @param array $params
-	 */
-	public function onFileRename(array $params) {
+    /**
+     * @param array $params
+     */
+    public function onFileRename(array $params) {
         $this->logger->debug("Renaming ".$params['oldpath']." to ".$params['newpath'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['oldpath'], $params['newpath']], Monitor::RENAME);
     }
 
     /**
-	 * @param array $params
-	 */
+     * @param array $params
+     */
     public function onFileCreate(array $params) {
         $this->logger->debug("Creating ".$params['path'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['path']], Monitor::CREATE);
     }
     
     /**
-	 * @param array $params
-	 */
+     * @param array $params
+     */
     public function onFileWrite(array $params) {
         $this->logger->debug("Writing ".$params['path'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['path']], Monitor::WRITE);
     }
     
     /**
-	 * @param array $params
-	 */
+     * @param array $params
+     */
     public function onFileDelete(array $params) {
         $this->logger->debug("Deleting ".$params['path'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['path']], Monitor::DELETE);
     }
     
     /**
-	 * @param array $params
-	 */
+     * @param array $params
+     */
     public function onFileCopy(array $params) {
         $this->logger->debug("Copying ".$params['oldpath']." to ".$params['newpath'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['oldpath'], $params['newpath']], Monitor::RENAME);
     }
     
     /**
-	 * @param array $params
-	 */
+     * @param array $params
+     */
     public function onFileTouch(array $params) {
         $this->logger->debug("Touching ".$params['path'].": Params: ".print_r($params, true), ['app' =>  Application::APP_ID]);
         $this->analyze([$params['path']], Monitor::WRITE);

lib/FilesHooks.php

Indentation +63 added lines, -63 removed lines

@@ -26,86 +26,86 @@
 
 class FilesHooks {
 
-	/**
-	 * Retrieve the FilesEvents' Controller.
-	 *
-	 * @return FilesEvents
-	 */
-	protected static function getController(): FilesEvents {
-		$app = new Application();
+    /**
+     * Retrieve the FilesEvents' Controller.
+     *
+     * @return FilesEvents
+     */
+    protected static function getController(): FilesEvents {
+        $app = new Application();
 
-		return $app->getContainer()
-				   ->query(FilesEvents::class);
-	}
+        return $app->getContainer()
+                    ->query(FilesEvents::class);
+    }
 
-	/**
-	 * Hook events: file is updated.
-	 *
-	 * @param array $params
-	 */
-	public static function onFileUpdate(array $params) {
-		self::getController()
-			->onFileUpdate($params);
-	}
+    /**
+     * Hook events: file is updated.
+     *
+     * @param array $params
+     */
+    public static function onFileUpdate(array $params) {
+        self::getController()
+            ->onFileUpdate($params);
+    }
 
 
-	/**
-	 * Hook events: file is renamed.
-	 *
-	 * @param array $params
-	 */
-	public static function onFileRename(array $params) {
-		self::getController()
-			->onFileRename($params);
+    /**
+     * Hook events: file is renamed.
+     *
+     * @param array $params
+     */
+    public static function onFileRename(array $params) {
+        self::getController()
+            ->onFileRename($params);
     }
 	
-	/**
-	 * Hook events: file is created.
-	 *
-	 * @param array $params
-	 */
+    /**
+     * Hook events: file is created.
+     *
+     * @param array $params
+     */
     public static function onFileCreate(array $params) {
-		self::getController()
-			->onFileCreate($params);
+        self::getController()
+            ->onFileCreate($params);
     }
 	
-	/**
-	 * Hook events: file is written.
-	 *
-	 * @param array $params
-	 */
+    /**
+     * Hook events: file is written.
+     *
+     * @param array $params
+     */
     public static function onFileWrite(array $params) {
-		self::getController()
-			->onFileWrite($params);
+        self::getController()
+            ->onFileWrite($params);
     }
 	
-	/**
-	 * Hook events: file is deleted.
-	 *
-	 * @param array $params
-	 */
+    /**
+     * Hook events: file is deleted.
+     *
+     * @param array $params
+     */
     public static function onFileDelete(array $params) {
-		self::getController()
-			->onFileDelete($params);
+        self::getController()
+            ->onFileDelete($params);
     }
 	
-	/**
-	 * Hook events: file is touched.
-	 *
-	 * @param array $params
-	 */
+    /**
+     * Hook events: file is touched.
+     *
+     * @param array $params
+     */
     public static function onFileTouch(array $params) {
-		self::getController()
-			->onFileTouch($params);
+        self::getController()
+            ->onFileTouch($params);
     }
 	
-	/**
-	 * Hook events: file is copied.
-	 *
-	 * @param array $params
-	 */
+    /**
+     * Hook events: file is copied.
+     *
+     * @param array $params
+     */
     public static function onFileCopy(array $params) {
-		self::getController()
-			->onFileCopy($params);
-	}
+        self::getController()
+            ->onFileCopy($params);
+    }
 }
\ No newline at end of file