Commit Graph

1816 Commits

Author SHA1 Message Date
Michael Hunhoff
b44edbd90e remove duplicate check when saving file 2021-07-27 09:50:25 -06:00
mike-hunhoff
a1b3703a0d Merge pull request #686 from fireeye/fix/531
add additional filter logic when displaying capa matches by function
2021-07-27 08:48:35 -06:00
Michael Hunhoff
874dffc13f add additional filter logic when displaying capa matches by function 2021-07-26 17:37:35 -06:00
Capa Bot
8b572dc63f Sync capa rules submodule 2021-07-26 21:48:37 +00:00
Willi Ballenthin
659b29a62d Merge pull request #685 from fireeye/dependabot/pip/smda-1.5.19
build(deps): bump smda from 1.5.18 to 1.5.19
2021-07-26 09:22:22 -06:00
dependabot[bot]
7a558898e1 build(deps): bump smda from 1.5.18 to 1.5.19
Bumps [smda](https://github.com/danielplohmann/smda) from 1.5.18 to 1.5.19.
- [Release notes](https://github.com/danielplohmann/smda/releases)
- [Commits](https://github.com/danielplohmann/smda/commits)

---
updated-dependencies:
- dependency-name: smda
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-07-26 14:02:46 +00:00
Capa Bot
7dee553558 Sync capa rules submodule 2021-07-23 16:39:19 +00:00
Capa Bot
9f6f18466a Sync capa rules submodule 2021-07-22 06:56:23 +00:00
Capa Bot
ef003366da Sync capa-testfiles submodule 2021-07-21 07:12:59 +00:00
Moritz
aaaadc2a47 Update installation.md (#679)
* Update installation.md

* Update doc/installation.md

Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>

Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
2021-07-20 20:01:10 +02:00
Willi Ballenthin
f94287c9ae Merge pull request #678 from fireeye/mr-tz-patch-1
Update README.md
2021-07-19 14:31:37 -06:00
Moritz
c56bfdca67 Update README.md 2021-07-19 21:10:20 +02:00
Willi Ballenthin
77a86e33bd Merge pull request #671 from Ana06/release2
Release capa v2.0 🎉
v2.0.0
2021-07-19 10:32:34 -06:00
Willi Ballenthin
4f44b5a60a Merge pull request #677 from fireeye/dependabot/pip/black-21.7b0
build(deps-dev): bump black from 21.6b0 to 21.7b0
2021-07-19 10:01:45 -06:00
dependabot[bot]
9361b3deb1 build(deps-dev): bump black from 21.6b0 to 21.7b0
Bumps [black](https://github.com/psf/black) from 21.6b0 to 21.7b0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/commits)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-07-19 14:02:42 +00:00
Ana Maria Martinez Gomez
9a0ec51f00 changelog: update date and number of rules 2021-07-16 17:37:03 +02:00
Ana Maria Martinez Gomez
5979892d29 version: capa v2.0
Prepare capa/version for capa 2.0 release.
2021-07-16 17:34:14 +02:00
Ana Maria Martinez Gomez
96f2536c34 changelog: capa v2.0
Prepare changelog for capa v2.0 release.
2021-07-16 17:34:13 +02:00
Capa Bot
52a3d35987 Sync capa rules submodule 2021-07-13 18:39:44 +00:00
Capa Bot
de4827e8fa Sync capa rules submodule 2021-07-13 18:34:24 +00:00
Capa Bot
b6d5409691 Sync capa rules submodule 2021-07-13 18:33:06 +00:00
Capa Bot
818f532ca9 Sync capa rules submodule 2021-07-13 18:31:57 +00:00
Capa Bot
895b548f34 Sync capa rules submodule 2021-07-13 03:09:36 +00:00
Willi Ballenthin
d9f1d0918f Merge pull request #675 from fireeye/dependabot/pip/isort-5.9.2
build(deps-dev): bump isort from 5.9.1 to 5.9.2
2021-07-12 10:33:16 -06:00
Willi Ballenthin
35abdb8ecf Merge pull request #674 from fireeye/dependabot/pip/tqdm-4.61.2
build(deps): bump tqdm from 4.61.1 to 4.61.2
2021-07-12 10:32:38 -06:00
dependabot[bot]
e77bbd68cf build(deps-dev): bump isort from 5.9.1 to 5.9.2
Bumps [isort](https://github.com/pycqa/isort) from 5.9.1 to 5.9.2.
- [Release notes](https://github.com/pycqa/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pycqa/isort/compare/5.9.1...5.9.2)

---
updated-dependencies:
- dependency-name: isort
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-07-12 14:02:19 +00:00
dependabot[bot]
4c73e5df3c build(deps): bump tqdm from 4.61.1 to 4.61.2
Bumps [tqdm](https://github.com/tqdm/tqdm) from 4.61.1 to 4.61.2.
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](https://github.com/tqdm/tqdm/compare/v4.61.1...v4.61.2)

---
updated-dependencies:
- dependency-name: tqdm
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-07-12 14:02:13 +00:00
Moritz
933789d02b Merge pull request #670 from fireeye/better-sig-loading
Better sig loading
2021-06-30 18:56:39 +02:00
Moritz Raabe
e88bb4814e update readme 2021-06-30 10:10:44 +02:00
Moritz
17b7694170 Merge pull request #666 from fireeye/fix-656
main: load signatures in order of their basename
2021-06-30 10:04:35 +02:00
Moritz Raabe
f191c4f145 wrap sig loading 2021-06-30 10:04:11 +02:00
Moritz Raabe
6fc2037f45 update sig file names 2021-06-30 08:54:37 +02:00
Moritz
b5f23e7baf Merge pull request #660 from fireeye/ci/test-scripts
test scripts and fix show-features
2021-06-29 21:46:43 +02:00
Capa Bot
f7e4273523 Sync capa rules submodule 2021-06-29 19:22:47 +00:00
Moritz Raabe
6860b9a040 address Willi's feedback 2021-06-29 21:16:31 +02:00
Moritz Raabe
5c8a4aafd7 test scripts and fix show-features 2021-06-29 21:16:31 +02:00
Moritz Raabe
02658d6962 do not process non-pe even with --format pe 2021-06-29 21:16:31 +02:00
William Ballenthin
b2b94e6a8e main: load signatures in order of their basename
closes #656
2021-06-29 10:52:07 -06:00
Moritz
65b3c046a3 Merge pull request #661 from fireeye/ida/extract-api-flirt
ida extract library funcs identified via flirt
2021-06-29 09:23:21 +02:00
Moritz Raabe
04b5949a05 address Mike's feedback 2021-06-29 08:57:43 +02:00
Moritz Raabe
18c87e4e55 ida extract library funcs identified via flirt 2021-06-29 08:49:48 +02:00
Willi Ballenthin
b84cc3128d Merge pull request #664 from fireeye/verify-pe-format
do not process non-pe even with --format pe
2021-06-28 12:09:54 -06:00
Willi Ballenthin
f83ef470cb Merge pull request #662 from fireeye/dependabot/pip/mypy-0.910
build(deps-dev): bump mypy from 0.902 to 0.910
2021-06-28 11:54:28 -06:00
Willi Ballenthin
2928dd279c Merge pull request #663 from fireeye/dependabot/pip/ruamel-yaml-0.17.10
build(deps): bump ruamel-yaml from 0.17.9 to 0.17.10
2021-06-28 11:54:15 -06:00
Moritz Raabe
f96d3fd8ba do not process non-pe even with --format pe 2021-06-28 18:21:01 +02:00
dependabot[bot]
d094272e4a build(deps): bump ruamel-yaml from 0.17.9 to 0.17.10
Bumps [ruamel-yaml](https://sourceforge.net/p/ruamel-yaml/code/ci/default/tree) from 0.17.9 to 0.17.10.

---
updated-dependencies:
- dependency-name: ruamel-yaml
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-28 14:02:54 +00:00
dependabot[bot]
7eeab35ae8 build(deps-dev): bump mypy from 0.902 to 0.910
Bumps [mypy](https://github.com/python/mypy) from 0.902 to 0.910.
- [Release notes](https://github.com/python/mypy/releases)
- [Commits](https://github.com/python/mypy/compare/v0.902...v0.910)

---
updated-dependencies:
- dependency-name: mypy
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-28 14:02:45 +00:00
Moritz
4e7b490bc3 Merge pull request #639 from fireeye/fix-630
more intuitive signature loading
2021-06-28 12:53:58 +02:00
Moritz Raabe
4ca9e168fe Merge branch 'master' into fix-630 2021-06-28 11:32:27 +02:00
Ana María Martínez Gómez
e579edecb4 Merge pull request #548 from Ana06/explorer-analyze
explorer: add analyze option
2021-06-24 12:22:24 +02:00