Commit Graph

5110 Commits

Author SHA1 Message Date
Capa Bot 05998b5d05 Sync capa-testfiles submodule 2021-02-04 08:19:32 +00:00
Capa Bot 1063f3fcda Sync capa rules submodule 2021-02-03 18:13:29 +00:00
Capa Bot 93c5e4637b Sync capa rules submodule 2021-02-03 15:15:51 +00:00
Moritz 073c2b5754 Merge pull request #412 from fireeye/ida/meta-add-baseaddr
add imagebase to IDA meta data
2021-02-02 16:48:22 +01:00
mike-hunhoff ef41d74b82 Merge pull request #411 from fireeye/fix/410
fixes #410
2021-02-02 08:38:23 -07:00
Moritz Raabe 84b3f38810 add imagebase to IDA meta data 2021-02-02 13:54:46 +01:00
mike-hunhoff 2288f38a11 Update capa/main.py
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
2021-02-01 12:45:36 -07:00
mike-hunhoff dbc4e06657 Update capa/main.py
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
2021-02-01 12:45:29 -07:00
Michael Hunhoff 2433777a76 fixes #410 2021-02-01 11:43:24 -07:00
Moritz bb7001f5f2 Merge pull request #409 from fireeye/fix/extract-bytes
improve bytes feature extraction
2021-02-01 17:38:40 +01:00
Moritz Raabe 9b5aaa40de improve bytes feature extraction 2021-02-01 17:17:22 +01:00
Capa Bot 96d74f48f4 Sync capa rules submodule 2021-02-01 11:55:33 +00:00
Michael Hunhoff c8a99c247c rulegen python2.x support 2021-01-29 12:45:04 -07:00
Michael Hunhoff 9f50a37e40 rulegen filtering basic blocks, adding support for double-click to add feature 2021-01-29 11:47:58 -07:00
Michael Hunhoff 54c9e39654 rulegen reorder context menu actions 2021-01-29 11:11:41 -07:00
Michael Hunhoff 3386a1e9f9 rulegen adding vert and hort splitters, moving save button to right 2021-01-29 10:51:26 -07:00
Michael Hunhoff b413f2eafe rulegen adding support for sync between editor and preview windows 2021-01-28 17:15:18 -07:00
Capa Bot f07af25a6a Sync capa rules submodule 2021-01-28 16:52:21 +00:00
Willi Ballenthin 14e65c4601 Merge pull request #401 from fireeye/linter-format
Lint rule formatting and improved rule dump
2021-01-28 09:18:20 -07:00
Capa Bot b5c2fb0259 Sync capa rules submodule 2021-01-28 16:06:09 +00:00
Capa Bot 92d98db7bb Sync capa-testfiles submodule 2021-01-28 15:25:17 +00:00
Michael Hunhoff 9caafedb8d merging upstream 2021-01-28 08:14:16 -07:00
Moritz e6f7ef604a Merge pull request #404 from fireeye/bugfix/403
fixing #403
2021-01-28 11:17:39 +01:00
Moritz Raabe 0eb8d3e47c fix time debug output 2021-01-28 11:09:25 +01:00
Moritz Raabe 072e30498b adjust negative hex numbers in to_yaml 2021-01-28 10:54:17 +01:00
Moritz Raabe d6e73577af dont change quotes when dumping 2021-01-28 10:54:17 +01:00
Moritz Raabe a81f98be8e manual adjust negative numbers 2021-01-28 10:54:17 +01:00
Moritz Raabe 0980e35c29 simplify string comparison 2021-01-28 10:54:17 +01:00
Moritz Raabe 336c2a3aff add option to only check reformat status 2021-01-28 10:54:17 +01:00
Moritz Raabe e3055bc740 check rule format consistency 2021-01-28 10:54:17 +01:00
Capa Bot 9406e3dbfb Sync capa rules submodule 2021-01-28 09:52:43 +00:00
Moritz 5307b7e1b1 Merge pull request #408 from fireeye/fix/lint-lib-path
adjust expected lib path and log time
2021-01-28 10:28:30 +01:00
Moritz Raabe f18a8f5b31 adjust expected lib path and log time 2021-01-28 10:18:03 +01:00
Moritz cfe99c4b72 Merge pull request #407 from fireeye/fix/lint-logging
disable extractor progress
2021-01-28 09:25:07 +01:00
Moritz Raabe 0d439c0f55 disable extractor progress 2021-01-28 09:22:15 +01:00
Moritz 6288a96a8b Merge pull request #406 from fireeye/ci/disable-python36
Disable Python 3.6 tests
2021-01-28 08:35:42 +01:00
Moritz 819b6f6ccf Merge pull request #402 from fireeye/lib-rules-subscoped
potential fix for #398
2021-01-28 08:35:28 +01:00
Moritz Raabe 4bc06aa8cd closes #405 2021-01-28 08:23:15 +01:00
Moritz Raabe 7b64425c24 update doc and test case 2021-01-28 08:18:23 +01:00
Michael Hunhoff 44c9d6a22b fixing #403 2021-01-27 18:29:53 -07:00
Moritz Raabe c750447d62 potential fix for #398 2021-01-27 17:59:56 +01:00
Michael Hunhoff b1c99d82fd rulegen adding special handling for count description 2021-01-22 09:41:17 -07:00
Michael Hunhoff 10db79f636 rulegen changes for backwards compat w/ Python 2.x 2021-01-22 08:22:37 -07:00
Willi Ballenthin 059ec8f3f2 Merge pull request #400 from fireeye/ci/enable-py39-2
bump smda, enable Python 3.9
2021-01-22 07:18:54 -07:00
Moritz Raabe 2c5508febd bump smda, enable Python 3.9 2021-01-22 10:00:25 +01:00
Capa Bot 905fff041b Sync capa rules submodule 2021-01-21 21:32:42 +00:00
Michael Hunhoff cd27a64f4e rulegen clear ruleset cache when user configures new directory 2021-01-21 14:15:52 -07:00
Michael Hunhoff d1b7a5c2e4 rulegen fixing bug in handling of subscope-rules 2021-01-21 14:05:24 -07:00
Michael Hunhoff 4b81b086db rulegen removing uneeded file 2021-01-21 10:19:37 -07:00
Michael Hunhoff 0db42c28a7 rulegen adding support to use cached ruleset, user click reset to reload rules from disk 2021-01-21 10:09:43 -07:00