refactor: 合并 avdetect 到 systeminfo,修复杀软检测误报

- 将 avdetect 的进程匹配逻辑合并到 systeminfo 插件
- 修复进程匹配使用 Contains 导致大量误报,改为精确匹配
- 修正 auto.json 中 Microsoft Security Essentials 为 Microsoft Defender
- 使用 map 索引优化进程匹配性能
- 清理废弃的 envinfo/avdetect i18n key
This commit is contained in:
ZacharyZcR
2026-05-15 22:52:11 +08:00
parent ca4e1ffad3
commit 76a4331fae
7 changed files with 104 additions and 250 deletions
+2 -13
View File
@@ -564,9 +564,6 @@ keylogger_save_failed:
keylogger_no_input:
other: "No keyboard input captured"
# Environment info
envinfo_sensitive:
other: "Found sensitive environment variable: {{.Arg1}}"
# Windows WMI
winwmi_success:
@@ -594,16 +591,6 @@ forwardshell_client_connected:
forwardshell_read_failed:
other: "Failed to read client command: {{.Arg1}}"
# AV detection
avdetect_load_failed:
other: "Failed to load AV database: {{.Arg1}}"
avdetect_loaded:
other: "Loaded {{.Arg1}} AV product info"
avdetect_found:
other: "Detected AV: {{.Arg1}} ({{.Arg2}} processes)"
avdetect_process:
other: " - {{.Arg1}}"
# Windows startup folder
winstartup_success:
other: "Windows startup folder persistence completed: {{.Arg1}} methods"
@@ -709,6 +696,8 @@ systeminfo_patches:
other: "Installed Patches: {{.Arg1}}"
systeminfo_antivirus:
other: "Antivirus Detected: {{.Arg1}}"
systeminfo_av_process:
other: " - {{.Arg1}}"
systeminfo_sudo:
other: "Sudo Privileges: {{.Arg1}}"
systeminfo_macos_detail: