William Ballenthin
4e6b475ff6
tests: lancelot: add number tests
2020-08-08 13:55:52 -06:00
William Ballenthin
02a8ad1ea4
tests: add more lancelot feature tests
2020-08-08 13:52:22 -06:00
William Ballenthin
43c6eec30b
extractors: begin to implement lancelot backend
2020-08-08 12:48:56 -06:00
Capa Bot
23d31c3c2c
Sync capa-testfiles submodule
2020-08-05 18:50:52 +00:00
William Ballenthin
4bb13d6075
tests: ida: fix offset arch test
2020-08-04 10:35:10 -06:00
William Ballenthin
e74b80a318
extractors: ida: add helper method get_function
2020-08-04 10:32:24 -06:00
William Ballenthin
e4acfd4852
merge
2020-08-04 09:48:26 -06:00
William Ballenthin
f02412bcc5
tests: fix function address
2020-08-03 19:10:05 -06:00
William Ballenthin
b09f29a996
features: viv: extract strings/bytes from nested pointers
...
closes #200
2020-08-03 17:35:29 -06:00
William Ballenthin
b81b5e5993
rules: add support for arch flavors of Number and Offset features
...
closes #210
2020-08-03 16:28:47 -06:00
Capa Bot
9d069b11ba
Sync capa-testfiles submodule
2020-08-03 16:04:03 +00:00
Capa Bot
52f9615d63
Sync capa-testfiles submodule
2020-07-31 21:17:04 +00:00
Capa Bot
6f689574d5
Sync capa-testfiles submodule
2020-07-31 15:43:08 +00:00
Capa Bot
96f207ca1f
Sync capa-testfiles submodule
2020-07-29 21:13:21 +00:00
William Ballenthin
c2bdeabeb8
submodule: testfiles update
2020-07-28 10:44:39 -06:00
Willi Ballenthin
137c0ca7f3
Merge pull request #209 from Ana06/statement-description
...
Enable descriptions for statement nodes
2020-07-28 10:02:07 -06:00
Capa Bot
01aa4755c5
Sync capa-testfiles submodule
2020-07-28 16:00:10 +00:00
Ana María Martínez Gómez
61818bbe04
tests: Test statement nodes descriptions
...
Add statement descriptions to `test_rule_yaml_descriptions` to ensure
rules with statement descriptions are parsed and extracted correctly.
2020-07-28 15:58:55 +02:00
Ana María Martínez Gómez
a74ab922a3
Get rid of * for Statement
...
They are not needed and complicate the code and make more difficult to
add more parameters to the initialization of Statements.
This produces many changes in the tests. The alternative would be to add
a parameter None in all of them, which are also a lot of changes.
2020-07-28 14:20:13 +02:00
Capa Bot
261713d0d1
Sync capa-testfiles submodule
2020-07-27 21:05:14 +00:00
William Ballenthin
7236283b2f
tests: ida: address comments
2020-07-25 11:40:04 -06:00
William Ballenthin
2fa2a98ae1
pep8
2020-07-25 10:26:57 -06:00
William Ballenthin
352d6f26fc
tests: ida: ensure they all pass
...
closes #202
2020-07-25 10:10:25 -06:00
William Ballenthin
1a1caf76fa
add test_ida_features
2020-07-25 01:41:23 -06:00
William Ballenthin
c91f9a375e
ida: parse offsets as signed numbers
...
closes #197
2020-07-25 00:58:44 -06:00
William Ballenthin
682bb14b99
submodule: testfiles update
2020-07-24 15:23:34 -06:00
William Ballenthin
12cff3599a
submodule: testfiles update
2020-07-23 17:20:16 -06:00
Capa Bot
20673a3166
Sync capa-testfiles submodule
2020-07-23 17:27:15 +00:00
Capa Bot
662a750c71
Sync capa-testfiles submodule
2020-07-22 21:37:43 +00:00
William Ballenthin
baeea5b6ec
*: update license header to reference Apache 2.0
...
closes #173
2020-07-22 15:05:24 -06:00
Capa Bot
c5626b695b
Sync capa-testfiles submodule
2020-07-22 18:07:40 +00:00
Capa Bot
f383181fed
Sync capa-testfiles submodule
2020-07-17 17:34:44 +00:00
Ana María Martínez Gómez
07764fb31f
Use isort 5
...
Run `isort --profile black --length-sort --line-width 120 .`
Update documentation as well.
2020-07-16 22:02:53 +02:00
William Ballenthin
f1fa4e134a
submodule: testfiles update
2020-07-15 19:11:39 -06:00
Ana María Martínez Gómez
78dae308c2
Add test for RegExp descriptions
...
Now that RegExp are a feature, ensure that descriptions are working.
2020-07-15 22:37:38 +02:00
William Ballenthin
3faf175da7
*: add license header
...
closes #144
2020-07-15 14:14:53 -06:00
William Ballenthin
61264bc500
submodule: update
2020-07-14 09:06:59 -06:00
William Ballenthin
867de57062
main: find_capabilities: extract feature counts per item, too
...
closes #95
closes #96
2020-07-03 10:12:03 -06:00
William Ballenthin
5317e1e11e
feature extractor: null: add get_base_address()
...
closes #88
2020-07-03 09:32:37 -06:00
Michael Hunhoff
d5a8c844db
remove format changes added by black
2020-07-03 12:30:33 -06:00
Michael Hunhoff
f09e683ef5
removing stale imports
2020-07-03 12:24:17 -06:00
Moritz
6730eb1c5e
Merge pull request #83 from fireeye/fix-count-bb
...
fix #78 count bb
2020-07-03 08:55:09 +02:00
William Ballenthin
a50bd4c394
pep8
2020-07-02 15:51:08 -06:00
William Ballenthin
9ad52da6d0
add test for #78
2020-07-02 15:50:56 -06:00
Moritz Raabe
8b5f58bf31
ensure string feature values are strings, tests
2020-07-02 23:44:39 +02:00
William Ballenthin
612eefe2e8
dos2unix
2020-07-02 11:08:21 -06:00
William Ballenthin
8f7cb6dad0
pep8
2020-07-02 11:01:18 -06:00
William Ballenthin
41c32013bb
Merge branch 'master' into fmt-black
2020-07-02 11:00:14 -06:00
William Ballenthin
1188103d1c
pep8: isort
2020-07-02 10:52:05 -06:00
Moritz Raabe
c37365f045
fix render, cleanup feature string display
2020-07-02 18:48:14 +02:00