Commit Graph

5110 Commits

Author SHA1 Message Date
Willi Ballenthin d7cfa4ee96 features: make features implement __lt__ 2022-05-25 15:08:26 -06:00
Willi Ballenthin 46a79f43bb Merge pull request #1037 from mandiant/gh-codespaces
add Github Codespaces config
2022-05-25 11:38:15 -06:00
Willi Ballenthin 5a71caf09c add Github Codespaces config 2022-05-25 14:44:10 +00:00
Willi Ballenthin a4003d7d91 tests: fix scripts using json document 2022-05-24 14:50:17 -06:00
Willi Ballenthin b35fe6cdb2 json, render: work with and serialize addresses 2022-05-24 13:52:56 -06:00
Willi Ballenthin d728869690 freeze: mypy and pep8 2022-05-24 13:52:40 -06:00
Willi Ballenthin 6b6dd70110 freeze: use address abstraction 2022-05-24 12:30:06 -06:00
Willi Ballenthin fc9681f6d5 helpers: fix import loop 2022-05-24 12:29:56 -06:00
Willi Ballenthin e4caa1d729 base extractor: use handles 2022-05-24 12:29:38 -06:00
Willi Ballenthin 4a577fabfc Merge pull request #1031 from mandiant/fix/ida-plugin
fix: rule generator handles
2022-05-23 11:29:48 -06:00
Willi Ballenthin 314ad4ea4d Merge pull request #1028 from mandiant/fix-988
elf: better detect Linux OS
2022-05-23 11:29:13 -06:00
Willi Ballenthin 2b446c75dd Merge pull request #1032 from mandiant/dependabot/pip/types-requests-2.27.27
build(deps-dev): bump types-requests from 2.27.25 to 2.27.27
2022-05-23 11:28:51 -06:00
Willi Ballenthin ecf22c2c50 Merge pull request #1033 from mandiant/dependabot/pip/psutil-5.9.1
build(deps-dev): bump psutil from 5.9.0 to 5.9.1
2022-05-23 11:28:43 -06:00
dependabot[bot] 6f234b57fc build(deps-dev): bump psutil from 5.9.0 to 5.9.1
Bumps [psutil](https://github.com/giampaolo/psutil) from 5.9.0 to 5.9.1.
- [Release notes](https://github.com/giampaolo/psutil/releases)
- [Changelog](https://github.com/giampaolo/psutil/blob/master/HISTORY.rst)
- [Commits](https://github.com/giampaolo/psutil/compare/release-5.9.0...release-5.9.1)

---
updated-dependencies:
- dependency-name: psutil
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-23 14:10:27 +00:00
dependabot[bot] ddb6c810eb build(deps-dev): bump types-requests from 2.27.25 to 2.27.27
Bumps [types-requests](https://github.com/python/typeshed) from 2.27.25 to 2.27.27.
- [Release notes](https://github.com/python/typeshed/releases)
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: types-requests
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-23 14:10:21 +00:00
Capa Bot 8f2c9cbd11 Sync capa rules submodule 2022-05-20 14:36:37 +00:00
Moritz Raabe a4f0c1c04c fix: rule generator handles 2022-05-19 20:43:02 +02:00
Willi Ballenthin 7642db332a Merge pull request #1029 from mandiant/feat/981-add-ida-handles
feat: add IDA handles and type annotations
2022-05-17 09:33:46 -06:00
Moritz Raabe 8e1f710312 fix: add __str__ 2022-05-12 18:49:53 +02:00
Moritz Raabe 83cae29dbe ci: temporarily test on PR 2022-05-12 18:40:45 +02:00
Moritz Raabe b2853cc56b feat: update dnfile tests and extractor 2022-05-12 18:37:02 +02:00
Moritz Raabe d8c9941f6b fix: filter address 2022-05-12 16:39:36 +02:00
Moritz Raabe 716a73dfb4 feat: add handles and type annotations 2022-05-12 15:42:25 +02:00
Capa Bot cded1d3125 Sync capa-testfiles submodule 2022-05-12 06:35:04 +00:00
Willi Ballenthin 7b05fc4180 pep8 + mypy 2022-05-11 13:25:25 -06:00
Willi Ballenthin 78e9280a93 Merge branch 'master' into feature-981 2022-05-11 13:20:48 -06:00
Willi Ballenthin ca2adb85b0 Merge pull request #1026 from mandiant/dependabot/pip/types-colorama-0.4.14
build(deps-dev): bump types-colorama from 0.4.13 to 0.4.14
2022-05-11 13:12:39 -06:00
Willi Ballenthin fca612e873 Merge pull request #1025 from mandiant/dependabot/pip/types-tabulate-0.8.9
build(deps-dev): bump types-tabulate from 0.8.8 to 0.8.9
2022-05-11 13:12:30 -06:00
Willi Ballenthin 07e35780d3 Merge branch 'master' into fix-988 2022-05-11 13:10:45 -06:00
Willi Ballenthin 521cbf9104 pep8 2022-05-11 13:10:08 -06:00
Willi Ballenthin a6427364e0 tests: add test demonstrating elf OS detection 2022-05-11 13:09:12 -06:00
Willi Ballenthin c30ce6e73a changelog 2022-05-11 12:54:30 -06:00
Willi Ballenthin e4abe46d16 elf: better detect Linux OS
closes #988
2022-05-11 12:53:17 -06:00
Willi Ballenthin 71cf19b850 render: handle dn tokens 2022-05-11 12:51:42 -06:00
Willi Ballenthin a734a045ae dnfile: address: use rva 2022-05-11 12:51:29 -06:00
Capa Bot 141da27715 Sync capa rules submodule 2022-05-11 16:34:46 +00:00
dependabot[bot] 7971b94001 build(deps-dev): bump types-colorama from 0.4.13 to 0.4.14
Bumps [types-colorama](https://github.com/python/typeshed) from 0.4.13 to 0.4.14.
- [Release notes](https://github.com/python/typeshed/releases)
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: types-colorama
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-09 14:13:43 +00:00
dependabot[bot] 95b3c6a594 build(deps-dev): bump types-tabulate from 0.8.8 to 0.8.9
Bumps [types-tabulate](https://github.com/python/typeshed) from 0.8.8 to 0.8.9.
- [Release notes](https://github.com/python/typeshed/releases)
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: types-tabulate
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-09 14:13:40 +00:00
Mike Hunhoff 0d849142ba dotnet: emit mixed mode characteristic (#1024) 2022-05-06 14:32:06 -06:00
Moritz f96c7379e0 Merge pull request #1021 from mandiant/ci/fix-build-workflow
ci: build on PR
2022-05-06 22:07:53 +02:00
Mike Hunhoff 6fb9dd961a dotnet: emit unmanaged call characteristic (#1023) 2022-05-06 13:05:48 -06:00
Mike Hunhoff a9c9b3cea8 dotnet: extract file function names (#1015) 2022-05-06 08:34:50 -06:00
Moritz ff2810654e Merge pull request #1018 from mandiant/dependabot/pip/vivisect-1.0.8
build(deps): bump vivisect from 1.0.7 to 1.0.8
2022-05-06 16:30:38 +02:00
Moritz Raabe 80e4161b40 ci: build on PR 2022-05-06 16:29:54 +02:00
Moritz 0473ce3259 Merge pull request #1017 from mandiant/dependabot/pip/mypy-0.950
build(deps-dev): bump mypy from 0.942 to 0.950
2022-05-06 15:50:15 +02:00
Moritz 0a211c1461 Merge pull request #1019 from mandiant/dependabot/pip/types-termcolor-1.1.4
build(deps-dev): bump types-termcolor from 1.1.3 to 1.1.4
2022-05-06 15:50:00 +02:00
Moritz Raabe 5573794a1f dep: bump viv-utils 2022-05-06 15:49:04 +02:00
dependabot[bot] d0a1313f33 build(deps-dev): bump types-termcolor from 1.1.3 to 1.1.4
Bumps [types-termcolor](https://github.com/python/typeshed) from 1.1.3 to 1.1.4.
- [Release notes](https://github.com/python/typeshed/releases)
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: types-termcolor
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-05 20:21:15 +00:00
dependabot[bot] aca4f27ee8 build(deps-dev): bump mypy from 0.942 to 0.950
Bumps [mypy](https://github.com/python/mypy) from 0.942 to 0.950.
- [Release notes](https://github.com/python/mypy/releases)
- [Commits](https://github.com/python/mypy/compare/v0.942...v0.950)

---
updated-dependencies:
- dependency-name: mypy
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-05 20:20:18 +00:00
dependabot[bot] bcd00004b8 build(deps-dev): bump types-tabulate from 0.8.7 to 0.8.8 (#1009) 2022-05-05 14:20:16 -06:00