diff --git a/capa/ida/plugin/__init__.py b/capa/ida/plugin/__init__.py index ca52e561..f262f486 100644 --- a/capa/ida/plugin/__init__.py +++ b/capa/ida/plugin/__init__.py @@ -21,7 +21,7 @@ logger = logging.getLogger(__name__) class CapaExplorerPlugin(idaapi.plugin_t): # Mandatory definitions - PLUGIN_NAME = "FLARE capa plugin" + PLUGIN_NAME = "FLARE capa explorer" PLUGIN_VERSION = "1.0.0" PLUGIN_AUTHORS = "michael.hunhoff@mandiant.com, william.ballenthin@mandiant.com, moritz.raabe@mandiant.com" diff --git a/capa/ida/plugin/capa_plugin_ida.py b/capa/ida/plugin/capa_explorer.py similarity index 100% rename from capa/ida/plugin/capa_plugin_ida.py rename to capa/ida/plugin/capa_explorer.py diff --git a/doc/usage.md b/doc/usage.md index 750721f1..422aa965 100644 --- a/doc/usage.md +++ b/doc/usage.md @@ -32,7 +32,7 @@ We like to use capa to help find the most interesting parts of a program, such a ![capa explorer](img/capa_explorer.png) The plugin currently supports IDA Pro 7.1 through 7.5 with either Python 2 or Python 3. To use the plugin, install capa -by following method 2 or 3 from the [installation guide](installation.md) and copy [capa_plugin_ida.py](../capa/ida/plugin/capa_plugin_ida.py) +by following method 2 or 3 from the [installation guide](installation.md) and copy [capa_plugin_ida.py](../capa/ida/plugin/capa_explorer.py) to the plugins directory of your IDA Pro installation. Following these steps you can run capa explorer in IDA Pro by navigating to `Edit > Plugins > capa explorer`. The plugin will prompt you to select a rules directory to use for analysis. You can use the [default rule set](https://github.com/fireeye/capa-rules/) or point the plugin to your own directory of rules.