gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2026-07-28 14:47:08 -07:00
Code Issues Packages Projects Releases Wiki Activity
6,189 Commits 53 Branches 49 Tags
fix/optimize-some-statement
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mike Hunhoff ffa7eccc08 update CHANGELOG 2026-05-19 20:04:34 +00:00
Mike Hunhoff 2e2e3c7708 Optimize Some Statement Evaluation and Fix Correctness Mismatches 2026-05-19 19:58:58 +00:00
Mike HunhoffandGitHub a98fd8240e fix duplicate rule candidate evaluation in optimized matching engine (#3080) 
* fix duplicate rule candidate evaluation in optimized matching engine

* update CHANGELOG

* update comments
 2026-05-18 17:40:55 -06:00
Mike HunhoffandGitHub ced180ddbc perf: optimize all_zeros using fast bytes comparison (#3078) 
* perf: optimize all_zeros using fast bytes comparison
 2026-05-18 10:20:10 +02:00
Mike HunhoffandGitHub db0e1536ce incorrect bytes() constructor usage in buf_filled_with (#3077) 2026-05-16 13:14:24 +02:00
Mike HunhoffandGitHub bbe050437b remove redundant code related to cli loading (#3076) 
* remove unnecessary os_ argument from capa.loader.collect_metadata

* remove redundant limitation check in main.py

* update CHANGELOG

* Update CHANGELOG.md
 2026-05-15 15:20:46 -06:00
Mike HunhoffandGitHub 3cd0e7867b Merge branch 'master' into dependabot/pip/pydantic-2.13.0 2026-04-16 12:36:15 -06:00
Mike HunhoffandGitHub 0798528b7b ci: use explicit and per job permissions (#3002) 
* ci: use explicit and per job permissions

* update CHANGELOG
 2026-04-07 14:39:41 -06:00
Mike HunhoffandGitHub c55b06860c ci: fix web rules failure (#3003) 
* ci: fix web rules failure

* address feedback

* ruff cleanup
 2026-04-07 13:01:23 -06:00
Mike HunhoffandGitHub ed7e0cd77d lint: replace black/isort/flake8 with ruff (#2992) 
* lint: replace isort/flake8 with ruff

* update ruff links

* remove stale isort reference

* update CHANGELOG

* address review

* remove unused imports

* remove unnecessary list comprehension

* remove quotes from type annotation

* use dict.get instead of if-else block

* remove unnecessary utf-8 encoding declaration

* Revert "remove unused imports"

This reverts commit 18ba50a22b.

* skip check for unused imports

* fix UP036 Version block is outdated for minimum Python version

* add TODO comment for unused imports

* replace black with ruff

* address review comments
 2026-04-07 12:10:41 -06:00
Mike HunhoffandGitHub a6ac839eea fix mypy formatting (#2973) 2026-03-27 10:54:28 -06:00
Mike HunhoffandGitHub 5a5545aa14 ghidra: fix unit tests (#2812) 
* ghidra: fix unit tests

* fix formatting
 2026-01-15 12:34:43 -07:00
Mike HunhoffGitHubgemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 		66dc70a775 ghidra: support PyGhidra (#2788) 
* ghidra: init commit switch to PyGhidra

* update CHANGELOG and PyGhidra version requirements

* Update capa/features/extractors/ghidra/helpers.py

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

* fix black errors

* support Ghidra v12

* remove deprecated APIs

* refactor outdated code

* fix pyinstaller, code refactoring

* address PR feedback

* add back capa_explorer.py

* beef up capa_explorer.py script

* refactor README

* refactor README

* fix #2747

* add sha256 check for workflows

* add sha256 check for workflows

* add sha256 check for workflows

---------

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 2025-12-18 17:55:49 -07:00
Mike HunhoffandGitHub ffce77b13d ci: deprecate macos-13 runner and use Python v3.13 for testing (#2777) 2025-11-24 19:53:39 -07:00
Mike HunhoffandGitHub 7844ebb144 v9.3.1 (#2769) 2025-11-20 08:37:49 -07:00
Mike HunhoffandGitHub 7780b9e8a8 explorer: add missing ida-netnode dependency to project.toml (#2765) 2025-11-18 08:55:57 -07:00
Mike HunhoffandGitHub 8d39765e7b ci: bump binja minor version (#2763) 2025-11-17 11:10:46 -07:00
Mike HunhoffGitHubgemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 		acb34e88d6 Update CHANGELOG.md 
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 2025-10-20 09:05:30 -06:00
Mike HunhoffandGitHub 42b6d8106a binja: update core version info check (#2709) 2025-08-20 11:56:56 -06:00
Mike HunhoffandGitHub d6f442b5bd ci: remove redundant "test_run" action (#2692) 
* ci: remove redundant "test_run" action

* update CHANGELOG
 2025-06-10 16:43:10 -06:00
Mike HunhoffandGitHub fa5d9a9302 v9.2.1 (#2685) 2025-06-06 14:16:25 -06:00
Mike HunhoffandGitHub 30fb4751f6 fix build issues discovered during and after v9.2.0 release (#2684) 
* ci: downgrade Ubuntu version to accommodate older GLIBC versions

* ci: upgrade Windows version to avoid deprecation

* ci: exclude pkg_resources from PyInstaller build

* update CHANGELOG

* update spec file

* ci: check if build runs without warnings or errors

* update CHANGELOG

* update build commands

* update build commands

* update build commands

* update build commands

* update build commands
 2025-06-06 12:02:06 -06:00
Mike HunhoffandGitHub a8eab7ddf0 update "publish package" worflow to 1.12.4 (#2680) 2025-06-05 13:44:30 -06:00
Mike HunhoffandGitHub 5ad1dda918 v9.2.0 (#2677) 2025-06-05 09:03:56 -06:00
Mike HunhoffandGitHub 98725c52dc vmray: do not restrict analysis to PE and ELF files, e.g. docx (#2672) 
* vmray: do not restrict analysis to PE and ELF files, e.g. docx

* update CHANGELOG
 2025-05-30 13:53:12 -06:00
Mike HunhoffandGitHub 96d1eb64c3 update binja core version (#2670) 
* update binja core version

* update CHANGELOG
 2025-05-30 10:52:56 -06:00
Mike HunhoffandGitHub 7407cb39ca add lint for registry control set regex that is not complete (#2643) 
* add lint for registry control set regex that is not complete

* update CHANGELOG
 2025-03-24 12:17:12 -06:00
Mike HunhoffGitHubWilli Ballenthin
 		1572dd87ed lint: add WARN for regex features that contain unescaped dot (#2635) 
* lint: add WARN for regex features that contain unescaped dot

* refactor comments

* update CHANGELOG

* address PR feedback

* Update scripts/lint.py

Co-authored-by: Willi Ballenthin <wballenthin@google.com>

* Update scripts/lint.py

Co-authored-by: Willi Ballenthin <wballenthin@google.com>

---------

Co-authored-by: Willi Ballenthin <wballenthin@google.com>
 2025-03-18 15:05:57 -06:00
Mike HunhoffandGitHub 7ecf292095 render: don't assume prior matches exist within thread (#2612) 
* render: don't assume prior matches exist within thread

* update CHANGELOG

* update comments
 2025-03-03 17:49:03 -07:00
Mike HunhoffandGitHub d3d71f97c8 vmray: only verify process OS and monitor ID match (#2613) 2025-02-24 14:14:05 -07:00
Mike HunhoffandGitHub a278bf593a cape: models: parse minimum fields required for analysis (#2607) 
* cape: models: parse minimum fields required for analysis

* update CHANGELOG
 2025-02-19 08:55:12 -07:00
Mike HunhoffandGitHub 160ce73a35 vmray: loosen file checks to enable processing of additional file types (#2571) 
* vmray: loosen file checks to enable addtional file types

* additional refactor to loosen file checks

* update CHANGELOG

* cleanup comments and small code refactor

* fix lints

* use NO_ADDRESS for submissions that don't have a base address

* update comments

* add test for ps1 trace
 2025-01-23 12:47:36 -07:00
Mike HunhoffandGitHub c3c93685e2 vmray: skip non-printable strings (#2551) 2025-01-08 08:40:32 -07:00
Mike Hunhoff 80e007787c dynamic: update CHANGELOG 2024-09-26 14:43:20 -06:00
Mike Hunhoff bfcc705117 dynamic: vmray: remove redundant test 2024-09-26 14:42:08 -06:00
Mike Hunhoff 834150ad1d dynamic: drakvuf: fix A/W API detection 2024-09-26 14:36:16 -06:00
Mike Hunhoff 31ec208a9b dynamic: cape: fix A/W API detection 2024-09-26 14:27:45 -06:00
Mike Hunhoff a5d9459c42 dynamic: vmray: fix A/W API detection 2024-09-26 14:15:21 -06:00
Mike Hunhoff a8d849e872 vmray: improve comments models.py 2024-07-30 11:43:53 -06:00
Mike Hunhoff 71c515d4d7 vmray: improve comments __init__.py 2024-07-29 12:19:53 -06:00
Mike Hunhoff 139dcc430c vmray: improve logging 2024-07-29 12:16:05 -06:00
Mike Hunhoff 7bf0b396ee core: improve error message for vmray 2024-07-29 12:02:14 -06:00
Mike Hunhoff 87dfa50996 scripts: remove old code from show-features.py 2024-07-29 12:00:29 -06:00
Mike Hunhoff 8cba23bbce vmray: improve extract_import_names 2024-07-29 11:49:04 -06:00
Mike Hunhoff 1a3cf4aa8e vmray: update extractor.py format_params 2024-07-29 11:41:31 -06:00
Mike Hunhoff 51b853de59 vmray: remove bad print statements 2024-07-29 11:39:03 -06:00
Mike Hunhoff 3043fd6ac8 vmray: merge upstream 2024-07-29 11:37:37 -06:00
Mike Hunhoff b967213302 vmray: improve comments __init__.py 2024-07-25 12:30:20 -06:00
Mike Hunhoff 05fb8f658f vmray: fix flake8 lints 2024-07-25 12:19:22 -06:00
Mike Hunhoff 7b3812ae19 vmray: improve error reporting 2024-07-25 12:12:49 -06:00
Mike Hunhoff 5b7a2be652 vmray: remove outdated comments __init__.py 2024-07-25 09:33:17 -06:00
Mike Hunhoff b8d3d77829 vmray: document vmray support in README 2024-07-24 10:35:34 -06:00
Mike Hunhoff 9a1364c21c vmray: document vmray support in README 2024-07-24 10:32:22 -06:00
Mike Hunhoff 6e146bb126 vmray: fix lints 2024-07-24 10:12:21 -06:00
Mike Hunhoff 85373a7ddb cape: add explicit check for CAPE report format file extension 2024-07-24 10:09:22 -06:00
Mike Hunhoff f6d12bcb41 vmray: fix lints 2024-07-24 10:03:57 -06:00
Mike Hunhoff f471386456 vmray: merge upstream and fix conflicts 2024-07-24 10:02:07 -06:00
Mike Hunhoff 31e53fab20 vmray: improve models.py comments 2024-07-23 09:52:36 -06:00
Mike Hunhoff cbdc7446aa vmray: merge upstream 2024-07-23 09:49:40 -06:00
Mike Hunhoff 46b68d11b7 vmray: improve models.py comments 2024-07-23 09:48:52 -06:00
Mike Hunhoff 3b94961133 vmray: complete pefile model tests 2024-07-19 15:50:07 -06:00
Mike Hunhoff 6ef485f67b vmray: refactor model tests 2024-07-19 15:44:53 -06:00
Mike Hunhoff 4dfc53a58f vmray: refactor model tests 2024-07-19 15:42:04 -06:00
Mike Hunhoff 98939f8a8f vmray: improve FunctionCall model 2024-07-19 15:38:26 -06:00
Mike Hunhoff 4490097e11 vmray: add summary_v2.json model tests 2024-07-19 15:28:47 -06:00
Mike Hunhoff 2ba2a2b013 vmray: remove unneeded json.loads from __init__.py 2024-07-19 15:05:21 -06:00
Mike Hunhoff 28792ec6a6 vmray: add model tests for FunctionCall 2024-07-19 13:56:46 -06:00
Mike Hunhoff 658927c103 vmray: refactor models.py 2024-07-19 11:58:48 -06:00
Mike Hunhoff 673f7cccfc vmray: refactor models.py 2024-07-19 11:57:07 -06:00
Mike Hunhoff 6e0dc83451 vmray: refactor global_.py 2024-07-19 11:51:16 -06:00
Mike Hunhoff 8bf0d16fd8 vmray: add init support for ELF files 2024-07-18 17:52:33 -06:00
Mike Hunhoff 24a31a8bc3 vmray: add comments to __init__.py 2024-07-18 14:23:20 -06:00
Mike Hunhoff 6f7cc7cdb0 vmray: improve detections for unsupported input files 2024-07-18 11:33:42 -06:00
Mike Hunhoff 64a09d3146 vmray: remove broken assert for unique OS PIDs 2024-07-18 11:20:03 -06:00
Mike Hunhoff 998537ddf8 vmray: remove outdated comments 2024-07-18 09:10:50 -06:00
Mike Hunhoff 5afea29473 vmray: update CHANGELOG release notes with VMRay integration 2024-07-18 09:06:58 -06:00
Mike Hunhoff fd7bd94b48 vmray: remove outdated comments 2024-07-18 08:50:20 -06:00
Mike Hunhoff 330c77a32a vmray: implement get_call_name 2024-07-17 15:04:00 -06:00
Mike Hunhoff 19a6f3ad49 vmray: improve supported file type validation 2024-07-17 12:37:51 -06:00
Mike Hunhoff 100df45cc0 vmray: add logging for skipped deref param types 2024-07-17 12:27:14 -06:00
Mike Hunhoff cc87ef39d5 vmray: remove and document extract_call_features comments 2024-07-17 12:18:01 -06:00
Mike Hunhoff ec7e43193e vmray: update comment for extract_process_features 2024-07-17 12:10:18 -06:00
Mike Hunhoff b68a91e10b vmray: validate supported flog version 2024-07-17 12:06:23 -06:00
Mike Hunhoff 15889749c0 vmray: merge upstream 2024-07-17 11:54:58 -06:00
Mike Hunhoff af26bef611 vmray: fix lints 2024-07-12 20:21:57 -06:00
Mike Hunhoff 42fddfbf31 vmray: improve comments 2024-07-12 20:19:06 -06:00
Mike Hunhoff 5214675eeb vmray: update tests.yml 2024-07-12 19:55:06 -06:00
Mike Hunhoff 4f2467cae0 vmray: update CHANGELOG 2024-07-12 19:53:33 -06:00
Mike Hunhoff 28c278b9e6 vmray: improve comments 2024-07-12 19:09:10 -06:00
Mike Hunhoff 26b5870ef4 vmray: improve comments 2024-07-12 19:06:06 -06:00
Mike Hunhoff 1f5b6ec52c vmray: improve comments 2024-07-12 19:00:48 -06:00
Mike Hunhoff 307b0cc327 vmray: add comments 2024-07-12 18:51:21 -06:00
Mike Hunhoff 253d70efac vmray: add comments 2024-07-12 18:49:08 -06:00
Mike Hunhoff 85632f698f vmray: clean up models 2024-07-12 18:45:53 -06:00
Mike Hunhoff 931a9b9421 vmray: clean up models 2024-07-12 18:44:29 -06:00
Mike Hunhoff 06631fc39d vmray: remove call feature extraction for out parameters 2024-07-12 18:42:42 -06:00
Mike Hunhoff 4bbe9e1ce9 vmray: emit number and string call features for pointer dereference 2024-07-12 18:35:50 -06:00
Mike Hunhoff e2f5eb7d30 vmray: clean up models 2024-07-12 16:43:48 -06:00
Mike Hunhoff 5b7a0cad5f vmray: emit number call features for output parameters 2024-07-12 16:36:28 -06:00
Mike Hunhoff da0545780b vmray: emit number call features for input parameters 2024-07-12 16:25:56 -06:00