Fixes file system monitor on linux (#110)

Author: gfs

Cli/Program.cs

@@ -704,10 +704,18 @@ private static int RunMonitorCommand(MonitorCommandOptions opts)
 
                 foreach (String dir in directories)
                 {
-                    foreach (NotifyFilters filter in filterOptions)
+                    if (RuntimeInformation.IsOSPlatform(OSPlatform.Linux))
                     {
-                        var newMon = new FileSystemMonitor(opts.RunId, dir, (filter != NotifyFilters.LastAccess) && opts.InterrogateChanges, filter);
-                        monitors.Add(newMon);
+                        var newMon = new FileSystemMonitor(opts.RunId, dir, false);
+                    }
+                    else
+                    {
+                        foreach (NotifyFilters filter in filterOptions)
+                        {
+                            Log.Information("Adding Path {0} Filter Type {1}", dir, filter.ToString());
+                            var newMon = new FileSystemMonitor(opts.RunId, dir, false, filter);
+                            monitors.Add(newMon);
+                        }
                     }
                 }
             }
@@ -741,7 +749,7 @@ private static int RunMonitorCommand(MonitorCommandOptions opts)
                 aTimer.Enabled = true;
             }
 
-            foreach (var c in monitors)
+            foreach (FileSystemMonitor c in monitors)
             {
                 Log.Information("{0}: {1}", Strings.Get("Begin"), c.GetType().Name);
 

Lib/Collectors/FileSystem/FileSystemMonitor.cs

@@ -107,6 +107,11 @@ public void WriteChange(FileSystemEventArgs obj)
             cmd.Parameters.AddWithValue("@extended_results", "");
             cmd.Parameters.AddWithValue("@notify_filters", watcher.NotifyFilter.ToString());
             cmd.Parameters.AddWithValue("@serialized", JsonConvert.SerializeObject(obj));
+            FileSystemMonitorResult fileSystemObject = new FileSystemMonitorResult()
+            {
+                evt = obj,
+                filter = watcher.NotifyFilter
+            };
 
             cmd.ExecuteNonQuery();
         }

Lib/Objects/ResultObjects.cs

@@ -3,6 +3,7 @@
 using AttackSurfaceAnalyzer.Collectors.FileSystem;
 using AttackSurfaceAnalyzer.ObjectTypes;
 using Serilog;
+using System.IO;
 
 namespace AttackSurfaceAnalyzer.ObjectTypes
 {
@@ -53,6 +54,12 @@ public FileSystemResult()
         }
     }
 
+    public class FileSystemMonitorResult
+    {
+        public FileSystemEventArgs evt;
+        public NotifyFilters filter;
+    }
+
     public class OpenPortResult: CompareResult
     {
         public OpenPortObject Base;