Commit Graph

181 Commits

Author SHA1 Message Date
Moritz
12671ea44b Merge pull request #73 from fireeye/ana-fix-tests
Fix KeyError in Range#evaluate()
2020-07-02 11:30:42 +02:00
Ana María Martínez Gómez
f8cfb67d02 Fix KeyError in Range#evaluate()
If the key doesn't exist, `evaluate` raises a `KeyError` Exception,
making the tests fail.
2020-07-02 11:28:47 +02:00
Moritz
aac5ac71d2 Merge pull request #72 from fireeye/ana-linter-namespace
Fix get_features rule linter
2020-07-02 10:20:30 +02:00
Ana María Martínez Gómez
a80f38ec75 Fix get_features rule linter
To support matching namespaces `get_features()` get an extra parameters
which was missing in the rule linter.
2020-07-02 09:24:51 +02:00
Willi Ballenthin
8f6396c526 Merge pull request #69 from fireeye/capa-explorer-add-submodule-item-type
capa explorer: add subscope item type
2020-07-01 14:34:04 -06:00
Willi Ballenthin
bcd68b14b9 Merge pull request #70 from fireeye/capa-explorer-default-sort-order-for-reset
capa explorer: default sort asc when reset occurs
2020-07-01 14:33:21 -06:00
Willi Ballenthin
b31cad551c Merge pull request #68 from fireeye/capa-explorer-support-multiple-range-locations
capa explorer: adding support for multiple locations under range
2020-07-01 14:32:50 -06:00
Michael Hunhoff
28ac48dd17 add default sort order asc when reset occurs 2020-07-01 13:54:00 -06:00
Michael Hunhoff
1cf36b5792 adding new item type for subscope to help render 2020-07-01 13:38:20 -06:00
Michael Hunhoff
65f75e517a adding support for multiple locations under range 2020-07-01 13:26:00 -06:00
Willi Ballenthin
2a43557f5f Merge pull request #64 from fireeye/fix-json-range-locations
render: json: include locations for range
2020-07-01 12:51:52 -06:00
William Ballenthin
6229377408 render: vverbose: factor out rendering of locations 2020-07-01 12:10:52 -06:00
William Ballenthin
da9f8fede4 render: json: include locations for range
closes #43
2020-07-01 12:05:43 -06:00
Willi Ballenthin
d0886c4c0d Merge pull request #61 from fireeye/fix-range-min-zero
rules: range: correct handling of range with min==0
2020-07-01 11:57:22 -06:00
Willi Ballenthin
f55c1ac604 Merge pull request #51 from fireeye/match-namespaces
engine, rules: support matching namespaces, not just rule names
2020-07-01 10:23:06 -06:00
Willi Ballenthin
089bf27f9c Merge pull request #56 from fireeye/ana-fix-post-commit
Fix unrestored stashed changes in post-commit hook
2020-07-01 09:51:26 -06:00
Willi Ballenthin
1a36f60b85 Merge pull request #58 from fireeye/capa-explorer-support-doc-format
Capa explorer support doc format
2020-07-01 09:50:42 -06:00
Willi Ballenthin
de370e2bd0 Merge pull request #59 from fireeye/fix-bytes-display-vverbose
fix bug when rendering bytes feature in vverbose
2020-07-01 09:31:34 -06:00
Michael Hunhoff
ccdbd43cda fix bug in bytes feture rendering 2020-07-01 08:47:43 -06:00
Michael Hunhoff
62a0dc4bb6 fixing supscope display 2020-07-01 07:58:54 -06:00
Michael Hunhoff
2e12504083 changes for upstream 2020-07-01 07:41:02 -06:00
Michael Hunhoff
5d83773036 merging upstream changes 2020-07-01 07:20:59 -06:00
Ana María Martínez Gómez
24792cd160 Fix unrestored stashed changes in post-commit hook
If the style checker of the rule linter failed, the stashed changes were
not restored. There is no reason to exist with an error code in a post
hook. In pre hooks this causes the action to be aborted.
2020-07-01 13:59:06 +02:00
Moritz Raabe
4d1449e3fa sync rules 2020-07-01 09:53:57 +02:00
Moritz Raabe
7c542c3da9 Merge branch 'linter-lib-checks' 2020-07-01 09:31:53 +02:00
Moritz Raabe
e602ae9d0f sync rules 2020-07-01 09:31:01 +02:00
Moritz Raabe
cd77aa23db Merge branch 'master' into linter-lib-checks 2020-07-01 09:27:56 +02:00
Willi Ballenthin
cb7b2c9618 readme: typo 2020-06-30 22:27:40 -06:00
Michael Hunhoff
104816f631 adding support for new doc format, UI changes for font color, weight 2020-06-30 17:05:21 -06:00
William Ballenthin
ebff65adc4 rules: range: simplify logic 2020-06-30 00:46:19 -06:00
William Ballenthin
9aba2eb3a5 rules: range: correct handling of range with min==0
closes #57
2020-06-30 00:44:22 -06:00
William Ballenthin
eee15b7658 rules: add documentation about how namespace vs rule names are matched 2020-06-30 00:25:37 -06:00
William Ballenthin
970977ade5 tests: demonstrate a bit more depth to namespace matching 2020-06-30 00:20:40 -06:00
William Ballenthin
e2296f0f40 Merge branch 'master' of github.com:fireeye/capa into match-namespaces 2020-06-30 00:18:44 -06:00
Willi Ballenthin
5cbfbc4997 Merge pull request #34 from fireeye/rule-organization
update output rendering
2020-06-29 13:07:51 -06:00
William Ballenthin
3f4489849a Merge branch 'master' of github.com:fireeye/capa 2020-06-29 12:28:30 -06:00
Willi Ballenthin
d97e4fb1d8 Merge pull request #54 from fireeye/py3-changes-for-capa-json
Python 3 serialization changes
2020-06-30 22:07:34 -06:00
Michael Hunhoff
52f7fb561f changes to support py3 2020-06-30 16:45:08 -06:00
Willi Ballenthin
7d644fd86b Merge pull request #38 from fireeye/ana-fix-keyerror
Fix KeyError when deleting nonexistent keys
2020-06-30 15:21:12 -06:00
Willi Ballenthin
59beee6b4a Merge pull request #44 from fireeye/doclint/unsigned
Doclint/unsigned
2020-06-30 15:19:45 -06:00
Moritz Raabe
5cee0d9b80 add lint negative numbers and cleanup tests 2020-06-30 22:17:42 +02:00
Moritz Raabe
afe5dba92a document signed vs unsigned 2020-06-30 22:11:57 +02:00
Ana María Martínez Gómez
8e78d8de53 Fix KeyError when deleting nonexistent keys
`hidden_meta` saves not only the existing hidden meta keys, but also
those who don't exist with value `None`. For example:
```
{'capa/path': None, 'capa/nursery': None}
```

Deleting nonexistent keys raises a `KeyError` exception.
2020-06-30 14:24:06 +02:00
William Ballenthin
51fec3959c render: fix exception when lib rule has no namespace 2020-06-29 12:28:18 -06:00
William Ballenthin
fbbc8a573f main: remove old render code 2020-06-29 12:28:01 -06:00
William Ballenthin
b1374f2dd0 submodule: rules: update 2020-06-29 12:26:31 -06:00
William Ballenthin
c5a718d5ba main: emit json even if there are file limitations
closes #53
2020-06-29 12:06:31 -06:00
William Ballenthin
325aa9574f linter: check that lib rules don't have a namespace
closes #35
2020-06-29 06:16:19 -06:00
William Ballenthin
6e08cabea1 submodule: rules: update 2020-06-29 06:15:47 -06:00
William Ballenthin
7a5d2d025f linter: check that lib rules are in lib directory
closes #36
2020-06-29 06:09:18 -06:00