William Ballenthin
480df323e5
scripts: add py script for profiling time
2021-11-08 11:51:09 -07:00
William Ballenthin
a995b53c38
perf: add reset routine
2021-11-08 11:50:49 -07:00
William Ballenthin
35fa50dbee
pep8
2021-11-08 11:50:37 -07:00
William Ballenthin
d86c3f4d48
common: move Result to capa.common from capa.engine
...
fixes circular import error in capa.features.freeze
2021-11-08 11:50:16 -07:00
William Ballenthin
d573b83c94
rule: optimization: add some documentation
2021-11-05 16:49:38 -06:00
William Ballenthin
e63f072e40
rules: optimizer: use recursive cost of statements
2021-11-05 16:39:00 -06:00
William Ballenthin
a329147d28
engine: some: short circuit
2021-11-05 16:32:23 -06:00
William Ballenthin
18ba986eba
engine: or: short circuit
2021-11-05 16:32:12 -06:00
William Ballenthin
8d9f418b2b
rules: optimize by cost
2021-11-05 16:20:22 -06:00
William Ballenthin
623bac1a40
engine: statement: document that the order of children is important
2021-11-05 16:19:16 -06:00
William Ballenthin
702d00da91
gitignore
2021-11-05 15:24:24 -06:00
William Ballenthin
3a12472be8
perf: render: show evaluate.feature counter
2021-11-05 15:23:34 -06:00
William Ballenthin
6524449ad1
main: perf: human format the numbers
2021-11-05 15:23:22 -06:00
William Ballenthin
86cab26a69
add perf counters in module capa.perf
2021-11-05 14:59:22 -06:00
William Ballenthin
3d068fe3cd
scripts: add utilities for collecting profile traces
2021-11-04 13:17:38 -06:00
William Ballenthin
f98236046b
main: add coarse timing measurements
2021-11-04 12:38:35 -06:00
William Ballenthin
ed3bd4ef75
main: add timing ctx manager
2021-11-04 12:20:05 -06:00
Capa Bot
0409c431b8
Sync capa rules submodule
2021-11-02 18:47:47 +00:00
Capa Bot
ffbb841b03
Sync capa rules submodule
2021-11-02 18:47:18 +00:00
Willi Ballenthin
e9a7dbc2ff
Merge pull request #820 from mandiant/fix/linter-file-format
...
auto recognize shellcode based on file extension
2021-11-02 11:31:33 -06:00
Capa Bot
10dc8950c1
Sync capa rules submodule
2021-11-02 17:29:30 +00:00
Capa Bot
fe0fb1ccd2
Sync capa rules submodule
2021-11-02 17:17:47 +00:00
Moritz Raabe
e9170a1d4b
auto recognize shellcode based on file extension
2021-11-02 18:02:37 +01:00
Capa Bot
02bd8581d8
Sync capa-testfiles submodule
2021-11-02 16:42:40 +00:00
Moritz
ca574201a4
Merge pull request #818 from mandiant/dependabot/pip/ruamel-yaml-0.17.17
...
build(deps): bump ruamel-yaml from 0.17.16 to 0.17.17
2021-11-02 17:36:03 +01:00
Moritz
8e744d94e6
Merge pull request #817 from mandiant/dependabot/pip/black-21.10b0
...
build(deps-dev): bump black from 21.9b0 to 21.10b0
2021-11-02 17:35:52 +01:00
dependabot[bot]
6a28330dd1
build(deps): bump ruamel-yaml from 0.17.16 to 0.17.17
...
Bumps [ruamel-yaml](https://sourceforge.net/p/ruamel-yaml/code/ci/default/tree ) from 0.17.16 to 0.17.17.
---
updated-dependencies:
- dependency-name: ruamel-yaml
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-11-01 14:11:49 +00:00
dependabot[bot]
4537b52c18
build(deps-dev): bump black from 21.9b0 to 21.10b0
...
Bumps [black](https://github.com/psf/black ) from 21.9b0 to 21.10b0.
- [Release notes](https://github.com/psf/black/releases )
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md )
- [Commits](https://github.com/psf/black/commits )
---
updated-dependencies:
- dependency-name: black
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-11-01 14:11:42 +00:00
Willi Ballenthin
29e61e24a6
Merge pull request #815 from mandiant/feature-3.0.3
...
v3.0.3
2021-10-27 10:14:35 -06:00
William Ballenthin
041c8a4c2d
changelog
2021-10-27 09:43:35 -06:00
Capa Bot
433dfd8fa9
Sync capa rules submodule
2021-10-27 15:34:46 +00:00
William Ballenthin
2b46043419
v3.0.3
2021-10-27 09:32:45 -06:00
William Ballenthin
d31c8b0190
changelog
2021-10-27 09:29:54 -06:00
Willi Ballenthin
9003fdc1a2
Merge pull request #814 from mandiant/fix-802
...
bail with unique error codes
2021-10-27 09:25:55 -06:00
William Ballenthin
b1f4a2853e
Merge branch 'master' of github.com:fireeye/capa into fix-802
2021-10-27 09:25:29 -06:00
William Ballenthin
07412f047d
tests: fix check of status code E_MISSING_FILE
2021-10-27 09:24:22 -06:00
Willi Ballenthin
26ac21b908
Merge pull request #813 from mandiant/fix-130
...
Fix 130
2021-10-27 09:20:43 -06:00
William Ballenthin
4cc496a8e5
main: use constants to represent error codes
2021-10-26 16:57:33 -06:00
William Ballenthin
4f4e0881b5
changelog
2021-10-26 16:48:02 -06:00
William Ballenthin
9fe164665c
main: exit with unique error codes when bailing
...
TODO: create an enum of all these things so they're easy for a human to
read.
closes #802
2021-10-26 16:46:43 -06:00
William Ballenthin
c74193b5d7
Merge branch 'master' of github.com:fireeye/capa into fix-130
2021-10-26 15:26:22 -06:00
William Ballenthin
31ef06ef2b
sync testfiles
2021-10-26 15:26:18 -06:00
Capa Bot
83a95d66d1
Sync capa-testfiles submodule
2021-10-26 21:24:10 +00:00
William Ballenthin
4451b76f89
pep8
2021-10-26 15:21:28 -06:00
William Ballenthin
a1075b63ec
tests: add demonstration of bb layout
2021-10-26 15:20:08 -06:00
William Ballenthin
97c41228e0
changelog
2021-10-26 15:10:50 -06:00
William Ballenthin
8903d2abcb
show-capabilities-by-function: also include matches from BBs in fn
2021-10-26 15:05:53 -06:00
William Ballenthin
328e13fbfe
main: compute function & bb layout
...
so bb can be associated with function in output.
only captures BBs that have a rule match,
otherwise, there might be too much data captured.
closes #130 .
2021-10-26 15:04:50 -06:00
Capa Bot
b7cd5fec76
Sync capa rules submodule
2021-10-25 19:26:56 +00:00
Willi Ballenthin
6086dbcd84
Merge pull request #812 from mandiant/dependabot/pip/viv-utils-flirt--0.6.7
...
build(deps): bump viv-utils[flirt] from 0.6.6 to 0.6.7
2021-10-25 09:14:41 -06:00
