Willi Ballenthin
545236cdc2
readme: simplify example
2020-07-03 11:43:47 -06:00
Willi Ballenthin
f4cb8cc5b5
installation: wording
2020-07-03 11:41:48 -06:00
Willi Ballenthin
347f66c396
Merge pull request #92 from fireeye/fix/remove-unused-file
...
remove unused function.py file
2020-07-03 10:56:05 -06:00
Moritz Raabe
58b76f775c
remove unused function.py file
2020-07-03 14:37:46 +02:00
Moritz
6730eb1c5e
Merge pull request #83 from fireeye/fix-count-bb
...
fix #78 count bb
2020-07-03 08:55:09 +02:00
Willi Ballenthin
c6a287fe68
Merge pull request #84 from fireeye/capa-explorer-support-capa-doc-meta
...
capa explorer: adding support for capa doc meta
2020-07-02 18:00:23 -06:00
William Ballenthin
9c4ee19bcc
submodule: rules: update
2020-07-02 17:56:52 -06:00
William Ballenthin
8958e886de
readme: move rule format into capa/rules
2020-07-02 17:56:26 -06:00
Michael Hunhoff
8a6a41583a
adding support for capa doc meta
2020-07-02 17:46:13 -06:00
Willi Ballenthin
60f072f025
readme: update download text
2020-07-02 16:40:30 -06:00
Willi Ballenthin
e14af6a30a
readme: update download text
2020-07-02 16:37:51 -06:00
Willi Ballenthin
9a67cccebb
Merge pull request #81 from fireeye/render-metadata
...
render: report header and metadata
2020-07-02 16:33:32 -06:00
William Ballenthin
959abf9609
pep8
2020-07-02 16:31:48 -06:00
William Ballenthin
1ad8cefd0f
render: ida: move collect_metadata into capa.ida.helpers
2020-07-02 16:31:21 -06:00
William Ballenthin
e13b5c77c6
render: ida: add sha256, filetype
2020-07-02 16:26:55 -06:00
William Ballenthin
ff44801e5c
render: meta: add base address
2020-07-02 16:24:37 -06:00
William Ballenthin
ff46acc18f
main: bubble basic block features into function features
2020-07-02 16:08:04 -06:00
Willi Ballenthin
b49c0ac8d9
Merge pull request #82 from fireeye/fix/string-with-int-val
...
ensure string feature values are strings, tests
2020-07-02 16:00:09 -06:00
William Ballenthin
a50bd4c394
pep8
2020-07-02 15:51:08 -06:00
William Ballenthin
9ad52da6d0
add test for #78
2020-07-02 15:50:56 -06:00
Willi Ballenthin
0c4d96d9b9
Merge pull request #80 from fireeye/capa-explorer-support-feature-description
...
capa explorer: adding support for capa doc description field
2020-07-02 15:45:18 -06:00
Moritz Raabe
8b5f58bf31
ensure string feature values are strings, tests
2020-07-02 23:44:39 +02:00
Willi Ballenthin
96073f876a
Merge pull request #79 from fireeye/fix/verify-scope
...
only allow supported scopes
2020-07-02 15:43:47 -06:00
William Ballenthin
2676649342
pep8
2020-07-02 15:31:47 -06:00
William Ballenthin
6575a019c3
render: add report header and metadata
...
closes #45
2020-07-02 15:31:08 -06:00
Michael Hunhoff
4e5b83c3ed
adding support for description field; bug fix for limit to current function checkbox
2020-07-02 15:15:35 -06:00
Moritz Raabe
8708d254a2
only allow supported scopes
2020-07-02 22:26:18 +02:00
William Ballenthin
2fd59f0674
setup: add pytest tweaks to dev deps
2020-07-02 12:18:03 -06:00
William Ballenthin
cff7e9195a
pep8
2020-07-02 12:17:53 -06:00
William Ballenthin
482bb44876
main: collect metadata for inclusion in json document
...
closes #45
2020-07-02 12:17:09 -06:00
Willi Ballenthin
af06f4d815
Merge pull request #67 from fireeye/fmt-black
...
reformat all python code using `black`
2020-07-02 11:14:26 -06:00
William Ballenthin
612eefe2e8
dos2unix
2020-07-02 11:08:21 -06:00
William Ballenthin
8f7cb6dad0
pep8
2020-07-02 11:01:18 -06:00
Willi Ballenthin
6f44d59eae
Merge pull request #77 from fireeye/fix/rendervv
...
fix render, cleanup feature string display
2020-07-02 11:00:57 -06:00
William Ballenthin
41c32013bb
Merge branch 'master' into fmt-black
2020-07-02 11:00:14 -06:00
William Ballenthin
c6ac997a8d
setup: add formatting deps
2020-07-02 10:53:37 -06:00
William Ballenthin
1188103d1c
pep8: isort
2020-07-02 10:52:05 -06:00
Moritz Raabe
c37365f045
fix render, cleanup feature string display
2020-07-02 18:48:14 +02:00
William Ballenthin
5fda3c467f
tests: fix freeze test that was broken during merge
2020-07-02 10:40:16 -06:00
William Ballenthin
c185e9ef09
pep8: black
2020-07-02 10:32:26 -06:00
William Ballenthin
db2b1caeae
Merge branch 'master' into fmt-black
2020-07-02 10:25:24 -06:00
William Ballenthin
acbcd0c4b0
submodule: rules: update
2020-07-02 10:17:44 -06:00
Willi Ballenthin
e3aea925cc
Merge pull request #71 from fireeye/pyinstaller
...
pyinstaller working on linux/py2
2020-07-02 10:13:46 -06:00
Ana María Martínez Gómez
f6b54beb02
Merge pull request #39 from fireeye/ana-description
2020-07-02 17:07:04 +02:00
Ana María Martínez Gómez
152129cc25
Add tests for description feature
...
Test if the parsing of feature succeeds with every time of description.
2020-07-02 16:50:28 +02:00
Ana María Martínez Gómez
81741b49f7
Support inline descriptions for count
...
```
count(number(2 = AF_INET/SOCK_DGRAM)): 2
```
2020-07-02 16:50:22 +02:00
Ana María Martínez Gómez
64124c0b64
Remove True from Characteristic rules and output
...
Get rid of `True` in characteristic (rules, output and json) as it is
implicit. This way, the same syntax is used for characteristic as for
the rest of the features.
Co-authored-by: William Ballenthin <william.ballenthin@fireeye.com >
2020-07-02 16:50:15 +02:00
Ana María Martínez Gómez
681feebf35
Adapt description implementation to new output
...
As the `__str__` method is not used anymore in the output, the
description implementation needs to be adapted.
2020-07-02 16:50:07 +02:00
Ana María Martínez Gómez
767a76d814
Allow to add a description for every feature
...
Enable associate context for all features. This was called symbol before
and only enabled for `number`, `offset` and `bytes`.
This is not enabled for strings with regular expressions, as they are
not a feature.
2020-07-02 11:31:31 +02:00
Moritz
12671ea44b
Merge pull request #73 from fireeye/ana-fix-tests
...
Fix KeyError in Range#evaluate()
2020-07-02 11:30:42 +02:00
