gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2026-02-04 19:12:01 -08:00
Code Issues Packages Projects Releases Wiki Activity

vmray: emit process name

Browse Source
This commit is contained in:
Mike Hunhoff
2024-06-18 14:41:47 -06:00
parent 8f32b7fc65
commit b3ebf80d9b
2 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
capa/features/extractors/vmray/extractor.py
View File

@@ -17,7 +17,7 @@ import capa.features.extractors.vmray.global_
from capa.features.common import Feature
from capa.features.address import Address, AbsoluteVirtualAddress
from capa.features.extractors.vmray import VMRayAnalysis
from capa.features.extractors.vmray.models import Analysis, SummaryV2
from capa.features.extractors.vmray.models import Process, Analysis, SummaryV2
from capa.features.extractors.base_extractor import (
CallHandle,
SampleHashes,
@@ -62,8 +62,8 @@ class VMRayExtractor(DynamicFeatureExtractor):
yield from []
def get_process_name(self, ph) -> str:
# TODO (meh)
raise NotImplementedError()
process: Process = ph.inner
return process.image_name
def get_threads(self, ph: ProcessHandle) -> Iterator[ThreadHandle]:
# TODO (meh)

1
capa/features/extractors/vmray/models.py
View File

@@ -147,6 +147,7 @@ class Process(BaseModel):
monitor_reason: str
os_pid: int
filename: str
image_name: str
ref_parent_process: Optional[GenericReference] = None