 Aayush Goel
|
7c2a736c4b
|
Update CHANGELOG.md
|
2023-08-20 00:38:35 +05:30 |
|
|
Aayush Goel
|
918ec22667
|
Merge branch 'master' into Aayush-Goel-04/Issue#322
|
2023-08-20 00:38:26 +05:30 |
|
|
Aayush Goel
|
1027da9be0
|
add new feature for com
|
2023-08-20 00:36:37 +05:30 |
|
|
Capa Bot
|
5787e41dd2
|
Sync capa rules submodule
|
2023-08-19 18:14:15 +00:00 |
|
|
Capa Bot
|
0265657937
|
Sync capa rules submodule
|
2023-08-19 09:36:35 +00:00 |
|
|
Capa Bot
|
73477b6495
|
Sync capa rules submodule
|
2023-08-19 09:34:30 +00:00 |
|
|
Yacine Elhamer
|
521bd25d31
|
remove file-limitations checks for dynamic extractors
|
2023-08-18 15:23:19 +02:00 |
|
|
Yacine Elhamer
|
e7c0bea6e5
|
Match.from_capa(): remove reliance on the meta field to get the scope
|
2023-08-18 15:05:15 +02:00 |
|
|
Yacine Elhamer
|
a8bd5b1119
|
disable packed-sample warning for dynamic feature extractors
|
2023-08-18 14:31:32 +02:00 |
|
|
Yacine Elhamer
|
9144d12e51
|
add error message for invalid report files
|
2023-08-18 14:28:02 +02:00 |
|
|
Yacine Elhamer
|
d741544514
|
result_document.py: use the scopes attribute instead of meta["scope"]
|
2023-08-18 14:15:36 +02:00 |
|
|
Willi Ballenthin
|
5e31f0df23
|
cape: models: more fixes thanks to avast
|
2023-08-18 10:19:07 +00:00 |
|
|
Willi Ballenthin
|
18dff9d664
|
cape: models: more fixes thanks to avast
|
2023-08-18 10:15:12 +00:00 |
|
|
Yacine Elhamer
|
350094759a
|
main.py: look up rules scope with scopes attribute, not their meta field
|
2023-08-18 12:37:42 +02:00 |
|
|
Willi Ballenthin
|
b10275e851
|
black
|
2023-08-18 08:23:21 +00:00 |
|
|
Willi Ballenthin
|
05cf7201ad
|
Merge branch 'dynamic-feature-extraction' into feat/cape-pydantic
|
2023-08-18 10:22:55 +02:00 |
|
|
Willi Ballenthin
|
8cd5e03e87
|
ci: pre-commit: show-diff-on-failure
|
2023-08-18 08:19:27 +00:00 |
|
|
Willi Ballenthin
|
120917e0b5
|
cape: models: tweaks from Avast dataset
|
2023-08-18 08:10:55 +00:00 |
|
|
colton-gabertan
|
a2a2949675
|
Merge branch 'master' into backend-ghidra
|
2023-08-17 16:06:17 +00:00 |
|
|
Colton Gabertan
|
b3cf1129e3
|
Ghidra: Implement GhidraFeatureExtractor (#1681)
* Implement GhidraFeatureExtractor & repo changes
|
2023-08-16 15:58:47 -07:00 |
|
|
Yacine
|
264958ebfe
|
Update capa/features/common.py
Co-authored-by: Willi Ballenthin <wballenthin@google.com>
|
2023-08-16 16:12:26 +02:00 |
|
|
Willi Ballenthin
|
3614ce1409
|
cape: fix test failures
|
2023-08-16 11:43:45 +00:00 |
|
|
Willi Ballenthin
|
c80542ded3
|
cape: call: fix argument type switch
|
2023-08-16 11:37:41 +00:00 |
|
|
Willi Ballenthin
|
3350a936b7
|
ida: use ida_nalt not idaapi
closes #1730
|
2023-08-16 13:33:01 +02:00 |
|
|
Willi Ballenthin
|
724db83920
|
cape: require PE analysis
|
2023-08-16 13:23:00 +02:00 |
|
|
Willi Ballenthin
|
8788a40d12
|
Merge branch 'dynamic-feature-extraction' into feat/cape-pydantic
|
2023-08-16 13:13:29 +02:00 |
|
|
Willi Ballenthin
|
6f7bf96776
|
cape: use pydantic model
|
2023-08-16 11:12:05 +00:00 |
|
|
Willi Ballenthin
|
e943a71dff
|
cape: models: relax deserializing FlexibleModels
|
2023-08-16 10:04:20 +00:00 |
|
|
Willi Ballenthin
|
4be1c89c5b
|
cape: models: more data shapes
|
2023-08-16 09:50:13 +00:00 |
|
|
Willi Ballenthin
|
2eda053c79
|
cape: models: more data shapes
|
2023-08-16 09:41:36 +00:00 |
|
|
Willi Ballenthin
|
26539e68d9
|
cape: models: add tests
|
2023-08-16 08:57:54 +00:00 |
|
|
Willi Ballenthin
|
046427cf55
|
cape: model: document the data we'll use in cape
|
2023-08-16 08:57:17 +00:00 |
|
|
Willi Ballenthin
|
25aabcd7e4
|
cape: models: more shapes
|
2023-08-16 07:48:59 +00:00 |
|
|
Willi Ballenthin
|
d8bea816dd
|
cape: models: add more fields
|
2023-08-15 14:36:49 +00:00 |
|
|
Willi Ballenthin
|
bb2b1824a9
|
Merge branch 'master' into dynamic-feature-extraction
|
2023-08-15 14:01:30 +02:00 |
|
|
Willi Ballenthin
|
7e78133925
|
Merge pull request #1728 from mandiant/fix/issue-1719
fix deprecation warnings
|
2023-08-15 14:00:15 +02:00 |
|
|
Willi Ballenthin
|
59a129d6d6
|
cape: add pydantic model for v2.2
|
2023-08-15 11:54:15 +00:00 |
|
|
Willi Ballenthin
|
db40d9bc7a
|
wip: add initial CAPE model
|
2023-08-15 11:41:11 +00:00 |
|
|
Yacine
|
d71ecc7a79
|
Update tests/test_ida_features.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2023-08-15 12:26:19 +02:00 |
|
|
Yacine
|
a5a1a0bfee
|
Update CHANGELOG.md
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2023-08-15 12:26:02 +02:00 |
|
|
Willi Ballenthin
|
827b4b29b4
|
test_rules: fix rule scoping logic
|
2023-08-15 09:21:49 +00:00 |
|
|
Willi Ballenthin
|
2a31b16567
|
merge
|
2023-08-15 08:56:41 +00:00 |
|
|
Willi Ballenthin
|
8118a3f353
|
changelog
|
2023-08-15 08:46:18 +00:00 |
|
|
Willi Ballenthin
|
e6d64ef561
|
pydantic: remove use of deprecated routines
closes #1718
|
2023-08-15 08:41:56 +00:00 |
|
|
Willi Ballenthin
|
408c5076c6
|
tests: ida: don't collect tests as pytest tests
closes #1719
|
2023-08-15 08:26:59 +00:00 |
|
|
Willi Ballenthin
|
c001c883f7
|
Merge pull request #1714 from mandiant/fix/issue-1697-1
rule scoping tweaks
|
2023-08-15 10:16:01 +02:00 |
|
|
Willi Ballenthin
|
476c7ff749
|
main: provide encoding to open
fixes flake8 warning
|
2023-08-15 08:13:22 +00:00 |
|
|
Willi Ballenthin
|
4978aa74e7
|
tests: temporarily xfail script test
closes #1717
|
2023-08-15 08:13:14 +00:00 |
|
|
Yacine Elhamer
|
4411911664
|
Merge remote-tracking branch 'parentrepo/dynamic-feature-extraction' into fix/issue-1697-1
|
2023-08-15 09:57:13 +02:00 |
|
|
Yacine
|
0e1ce21488
|
Merge pull request #1715 from mandiant/fix/issue-1710
fix rendering of scope in vverbose mode
|
2023-08-15 09:51:53 +02:00 |
|