function Ransomware.DuplicateEventCheck()

in ransomware/artifact.lua [2525:2544]

• 19 lines of code
• 6 McCabe index (conditional complexity)

function Ransomware.DuplicateEventCheck(eventData, processData)
    for _, v in pairs(processData.events) do
        if v.filePath == eventData.filePath then
            if v.operation == eventData.operation then
                if globals.FILE_RENAME ~= v.operation then
                    utils.DebugLog('SKIPPING DUPLICATE EVENT: ' .. eventData.filePath)
                    return true
                elseif v.filePreviousPath == eventData.filePreviousPath then
                    utils.DebugLog('SKIPPING DUPLICATE RENAME: ' .. eventData.filePath)
                    return true
                else
                    utils.DebugLog('VALID rename: ' .. eventData.filePath)
                    return false
                end
            end
        end
    end

    return false
end