From 26eda5904f8995df0ee01c17dab0cbcfafcc4acc Mon Sep 17 00:00:00 2001 From: Will Greenberg Date: Fri, 17 Jan 2025 12:03:40 -0800 Subject: [PATCH] Better wording on IMSI requested warning --- lib/src/analysis/imsi_requested.rs | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/src/analysis/imsi_requested.rs b/lib/src/analysis/imsi_requested.rs index 7b15621..75bb623 100644 --- a/lib/src/analysis/imsi_requested.rs +++ b/lib/src/analysis/imsi_requested.rs @@ -30,7 +30,7 @@ impl Analyzer for ImsiRequestedAnalyzer { return None; }; - // NAS identity request + // NAS identity request, ID type IMSI if payload == &[0x07, 0x55, 0x01] { if self.packet_num < PACKET_THRESHHOLD { return Some(Event { @@ -38,7 +38,7 @@ impl Analyzer for ImsiRequestedAnalyzer { severity: Severity::Medium }, message: format!( - "NAS IMSI request detected, however it was within \ + "NAS IMSI identity request detected, however it was within \ the first {} packets of this analysis. If you just \ turned your device on, this is likely a \ false-positive.", @@ -50,7 +50,7 @@ impl Analyzer for ImsiRequestedAnalyzer { event_type: EventType::QualitativeWarning { severity: Severity::High }, - message: format!("NAS IMSI request detected"), + message: format!("NAS IMSI identity request detected"), }) } }