mirror of
https://github.com/mandiant/capa.git
synced 2025-12-23 07:28:34 -08:00
test_rules.py: update rules' fomratting
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
This commit is contained in:
@@ -517,16 +517,16 @@ def test_subscope_rules():
|
|||||||
textwrap.dedent(
|
textwrap.dedent(
|
||||||
"""
|
"""
|
||||||
rule:
|
rule:
|
||||||
meta:
|
meta:
|
||||||
name: test call subscope
|
name: test call subscope
|
||||||
scopes:
|
scopes:
|
||||||
static: basic block
|
static: basic block
|
||||||
dynamic: thread
|
dynamic: thread
|
||||||
features:
|
features:
|
||||||
- and:
|
- and:
|
||||||
- string: "explorer.exe"
|
- string: "explorer.exe"
|
||||||
- call:
|
- call:
|
||||||
- api: HttpOpenRequestW
|
- api: HttpOpenRequestW
|
||||||
"""
|
"""
|
||||||
)
|
)
|
||||||
),
|
),
|
||||||
|
|||||||
Reference in New Issue
Block a user