Michael Hunhoff
21359da766
updating test for strings with special characaters
2021-03-23 16:02:47 -06:00
Michael Hunhoff
c7d24ee290
adding support for string features with special characters e.g. '\n'
2021-03-10 13:56:54 -07:00
Moritz Raabe
7b64425c24
update doc and test case
2021-01-28 08:18:23 +01:00
Moritz Raabe
1cb9ed9c01
addressing final comments
2020-09-25 18:38:46 +02:00
Moritz Raabe
4691302a78
parse descriptions for statements
2020-09-24 15:35:30 +02:00
Moritz Raabe
34e7991081
black 20.8b1 updates
2020-08-27 11:26:28 +02:00
Michael Hunhoff
dc8870861b
fixes 249
2020-08-26 16:31:07 -06:00
William Ballenthin
d3dad3a66a
rules: fix bug in string counting
...
closes #241
2020-08-16 21:38:13 -06:00
Ana María Martínez Gómez
adaac03d1d
extractor: remove characteristic(switch)
...
Get rid of the `characteristic(switch)` feature as any of our rules use
it and its analysis is not very easy. Analysis results most likely
differ across backends, leading to inconsistency.
2020-08-13 16:47:01 +02:00
William Ballenthin
b81b5e5993
rules: add support for arch flavors of Number and Offset features
...
closes #210
2020-08-03 16:28:47 -06:00
Ana María Martínez Gómez
61818bbe04
tests: Test statement nodes descriptions
...
Add statement descriptions to `test_rule_yaml_descriptions` to ensure
rules with statement descriptions are parsed and extracted correctly.
2020-07-28 15:58:55 +02:00
William Ballenthin
baeea5b6ec
*: update license header to reference Apache 2.0
...
closes #173
2020-07-22 15:05:24 -06:00
Ana María Martínez Gómez
78dae308c2
Add test for RegExp descriptions
...
Now that RegExp are a feature, ensure that descriptions are working.
2020-07-15 22:37:38 +02:00
William Ballenthin
3faf175da7
*: add license header
...
closes #144
2020-07-15 14:14:53 -06:00
Moritz Raabe
8b5f58bf31
ensure string feature values are strings, tests
2020-07-02 23:44:39 +02:00
William Ballenthin
1188103d1c
pep8: isort
2020-07-02 10:52:05 -06:00
William Ballenthin
c185e9ef09
pep8: black
2020-07-02 10:32:26 -06:00
William Ballenthin
db2b1caeae
Merge branch 'master' into fmt-black
2020-07-02 10:25:24 -06:00
Ana María Martínez Gómez
152129cc25
Add tests for description feature
...
Test if the parsing of feature succeeds with every time of description.
2020-07-02 16:50:28 +02:00
Ana María Martínez Gómez
64124c0b64
Remove True from Characteristic rules and output
...
Get rid of `True` in characteristic (rules, output and json) as it is
implicit. This way, the same syntax is used for characteristic as for
the rest of the features.
Co-authored-by: William Ballenthin <william.ballenthin@fireeye.com >
2020-07-02 16:50:15 +02:00
William Ballenthin
d23ef48bb6
pep8
2020-07-01 12:33:13 -06:00
William Ballenthin
e2296f0f40
Merge branch 'master' of github.com:fireeye/capa into match-namespaces
2020-06-30 00:18:44 -06:00
Moritz Raabe
5cee0d9b80
add lint negative numbers and cleanup tests
2020-06-30 22:17:42 +02:00
William Ballenthin
3d0bd64e1b
engine, rules: support matching namespaces, not just rule names
...
closes #37
2020-06-29 05:54:56 -06:00
Ana María Martínez Gómez
7e1e9e6618
Get rid of the Element class
...
The `Element` class is just used for testing. By using `Element` we are
not testing the actual code. Also, every time we implement a new feature
for the `Feature` class, we need to implement it for `Element` as well.
Replace `Element` by `Integer`.
2020-06-24 18:05:52 +02:00
William Ballenthin
add3537447
import source files, forgetting about 938 prior commits
2020-06-18 09:13:19 -06:00
