34 lines
990 B
SQL
34 lines
990 B
SQL
-- name: InsertFileMsofficeOleid :exec
|
|
INSERT INTO msoffice_oleid (
|
|
file_id, data
|
|
) VALUES ($1, $2);
|
|
|
|
-- name: InsertFileMsofficeOlevba :exec
|
|
INSERT INTO msoffice_olevba (
|
|
file_id, data
|
|
) VALUES ($1, $2);
|
|
|
|
-- name: InsertFileMsofficeMraptor :exec
|
|
INSERT INTO msoffice_mraptor (
|
|
file_id, data
|
|
) VALUES ($1, $2);
|
|
|
|
-- name: GetMSOfficeData :one
|
|
SELECT t1.file_id, t1.data AS oleid, t2.data AS olevba, t3.data AS mraptor
|
|
FROM msoffice_oleid as t1
|
|
LEFT join msoffice_olevba AS t2 ON t2.file_id = t1.file_id
|
|
LEFT JOIN msoffice_mraptor AS t3 ON t3.file_id = t1.file_id
|
|
WHERE t1.file_id = $1;
|
|
|
|
-- name: InsertMSOfficeResults :exec
|
|
INSERT INTO msoffice (
|
|
file_id, verdict, container_format, encrypted, file_format, vba_macros, xlm_macros,
|
|
vba_stomping, nb_autoexec, nb_iocs, nb_macros, nb_suspicious, olevba_results, macros
|
|
) VALUES (
|
|
$1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13, $14
|
|
);
|
|
|
|
-- name: GetMSOfficeResults :one
|
|
SELECT * FROM msoffice
|
|
WHERE file_id = $1
|
|
LIMIT 1;
|