mirror of
https://github.com/mandiant/capa.git
synced 2026-01-10 04:05:32 -08:00
Update docuemntation
This commit is contained in:
@@ -1,22 +1,22 @@
|
||||
# Capa Explorer WebUI
|
||||
# Capa Explorer Web
|
||||
|
||||
Capa Explorer WebUI is a web-based user interface for exploring program capabilities identified by the capa tool. It provides an intuitive and interactive way to analyze and visualize the results of capa analysis.
|
||||
|
||||
## Features
|
||||
|
||||
- **Import capa Results**: Easily upload or import capa JSON result files.
|
||||
- **Interactive Tree View**: Explore rule matches in a hierarchical structure.
|
||||
- **Function Capabilities**: Group capabilities by function for static analysis.
|
||||
- **Interactive Tree View**: Explore and filter rule matches in a hierarchical structure.
|
||||
- **Function Capabilities**: Group and filter capabilities by function for static analysis.
|
||||
- **Process Capabilities**: Group capabilities by process for dynamic analysis.
|
||||
- **Toggeable Settings**: Toggle between different view modes and filter options.
|
||||
|
||||
## Getting Started
|
||||
|
||||
1. **Access the Application**: Open the Capa Explorer WebUI in your web browser.
|
||||
You can start using Capa Explorer Web by accessing [https://mandiant.github.io/capa](https://mandiant.github.io/capa/) or running it locally by dowloading the offline release in the [releases](https://github.com/mandiant/capa/releases) section and loading it in your browser.
|
||||
|
||||
2. **Import capa Results**:
|
||||
|
||||
- Click on "Upload from local" to select a capa JSON file from your computer (with a version higher than 7.0.0).
|
||||
- Click on "Upload from local" to select a capa analysis document file from your computer (with a version higher than 7.0.0).
|
||||
- Or, paste a URL to a capa JSON file and click the arrow button to load it.
|
||||
- Alternatively, use the "Preview Static" or "Preview Dynamic" for sample data.
|
||||
|
||||
@@ -28,8 +28,8 @@ Capa Explorer WebUI is a web-based user interface for exploring program capabili
|
||||
- "Show library rule matches" to include or exclude library rules.
|
||||
|
||||
4. **Interact with the Data**:
|
||||
- Expand/collapse nodes in the TreeTable to see more details.
|
||||
- Use the search and filter options to find specific features or capabilities (rules).
|
||||
- Expand/collapse nodes in the table to see more details.
|
||||
- Use the search and filter options to find specific features, functions or capabilities (rules).
|
||||
- Right click on rule names to view their source code or additional information.
|
||||
|
||||
## Feedback and Contributions
|
||||
|
||||
Reference in New Issue
Block a user