efforg/rayhunter#670

View on GitHub →
#670 Improvements for detection submission
0xD3caf0xD3caf, edited OpenIdeas

I noticed when I submitted some logs that the process could be simplified and automated a bit. The current process relies on the user to submit relevant metadata (capture date, device, version information, etc) which creates a hurdle for user submissions. From what I can tell most of that information could be generated by the device. It looks like some of it is already gathered for the analysis json file. Could that be built on and then included in the zip?

I was also curious if the IMSI or Tower ID data is needed for later analysis? If not I think the default behavior should be to strip any identifying info when creating the zip.

Questions

  • Is IMSI or Tower ID data needed for any purpose?

Suggestions

  • Add option to sanitize data either when creating zip or during initial writing of QMDL files
  • Add additional metadata information file to zip
Comments (1)
cooperqcooperq, edited

stripping imsi and tower id data is something we have discussed in the past (I can’t find the relevant issue at the moment). Tower id data is helpful sometimes (we can see if a tower is out of place) Adding additional metadata to the zip file would be great and its definitely something we want!