From 6c6062d5a8a07608046e39a615c000b96396db11 Mon Sep 17 00:00:00 2001 From: Moritz Date: Tue, 15 Sep 2020 10:31:08 +0200 Subject: [PATCH] Update usage.md --- doc/usage.md | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/doc/usage.md b/doc/usage.md index ea9547cb..75a71b4f 100644 --- a/doc/usage.md +++ b/doc/usage.md @@ -4,11 +4,10 @@ See `capa -h` for all supported arguments and usage examples. ## tips and tricks - - [match only rules by given author or namespace](#only-run-selected-rules) - - [IDA Pro capa explorer](#capa-explorer) - - [IDA Pro rule generator](#rule-generator) - ### only run selected rules Use the `-t` option to run rules with the given metadata value (see the rule fields `rule.meta.*`). For example, `capa -t william.ballenthin@mandiant.com` runs rules that reference Willi's email address (probably as the author), or `capa -t communication` runs rules with the namespace `communication`. + +### IDA Pro plugin: capa explorer +Please check out the [capa explorer documentation](/capa/ida/plugin/README.md).