gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2026-01-15 22:32:44 -08:00
Code Issues Packages Projects Releases Wiki Activity

Simple example how to use capa as library

Browse Source 
Just quick example how to use capa as library, to save time to someone, reading code and scripts
This commit is contained in:
doomedraven
2020-12-01 11:20:49 +01:00
committed by GitHub
parent 10a062017d
commit 51ad526cfc
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
scripts/capa_as_library.py Normal file
View File

@@ -0,0 +1,22 @@
#!/usr/bin/env python3
import json
import capa.main
import capa.rules
import capa.engine
import capa.features
from capa.engine import *
sample_path = "path/to/file"
capa.main.RULES_PATH_DEFAULT_STRING = "/tmp/capa/rules/"
rules = capa.main.get_rules(capa.main.RULES_PATH_DEFAULT_STRING, disable_progress=True)
rules = capa.rules.RuleSet(rules)
extractor = capa.main.get_extractor(sample_path, "auto", disable_progress=True)
meta = capa.main.collect_metadata("", sample_path,capa.main.RULES_PATH_DEFAULT_STRING, "auto", extractor)
capabilities, counts = capa.main.find_capabilities(rules, extractor, disable_progress=True)
meta["analysis"].update(counts)
capa_json = json.loads(capa.render.render_json(meta, rules, capabilities))
capa_texttable = capa.render.render_default(meta, rules, capabilities)