William Ballenthin
|
56f9e16a8b
|
tests: viv: disable ELF tests due to #735
|
2021-08-23 17:51:28 -06:00 |
|
William Ballenthin
|
a4b0954532
|
viv: ignore mypy FP
|
2021-08-23 16:57:35 -06:00 |
|
William Ballenthin
|
fc73787849
|
extractors: file extractor arg consistency via kwargs
|
2021-08-23 16:42:16 -06:00 |
|
William Ballenthin
|
30a5493414
|
tests: smda: remove unused import
|
2021-08-23 16:13:01 -06:00 |
|
William Ballenthin
|
a729bdfbe6
|
elf: more clearly set first detected OS
|
2021-08-23 16:12:07 -06:00 |
|
William Ballenthin
|
dab88e482d
|
elf: add more explanation about ei_osabi
|
2021-08-23 16:08:01 -06:00 |
|
William Ballenthin
|
6482f67a0c
|
elf: document unused OS constants
|
2021-08-23 16:06:14 -06:00 |
|
William Ballenthin
|
a1bf95ec2c
|
features: formatting of OS constants
|
2021-08-23 16:00:57 -06:00 |
|
William Ballenthin
|
6961fde327
|
Merge branch 'feature-701' of github.com:fireeye/capa into feature-701
|
2021-08-23 15:59:09 -06:00 |
|
William Ballenthin
|
c0fe0420fc
|
changelog: tweak PR ref
|
2021-08-23 15:58:32 -06:00 |
|
Willi Ballenthin
|
2ba000a987
|
Merge branch 'master' into feature-701
|
2021-08-23 10:02:41 -06:00 |
|
Willi Ballenthin
|
a90e93e150
|
Update capa/main.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2021-08-23 08:54:43 -06:00 |
|
Willi Ballenthin
|
b6ab12d3c1
|
Update capa/features/common.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2021-08-23 08:54:22 -06:00 |
|
Willi Ballenthin
|
d07045f134
|
Merge pull request #731 from fireeye/dependabot/pip/vivisect-1.0.4
build(deps): bump vivisect from 1.0.3 to 1.0.4
|
2021-08-23 08:23:36 -06:00 |
|
dependabot[bot]
|
bede4a0aa1
|
build(deps): bump vivisect from 1.0.3 to 1.0.4
Bumps [vivisect](https://github.com/vivisect/vivisect) from 1.0.3 to 1.0.4.
- [Release notes](https://github.com/vivisect/vivisect/releases)
- [Changelog](https://github.com/vivisect/vivisect/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/vivisect/vivisect/compare/v1.0.3...v1.0.4)
---
updated-dependencies:
- dependency-name: vivisect
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-08-23 14:22:20 +00:00 |
|
Willi Ballenthin
|
de1cff356a
|
Merge pull request #733 from fireeye/dependabot/pip/tqdm-4.62.2
build(deps): bump tqdm from 4.62.1 to 4.62.2
|
2021-08-23 08:21:56 -06:00 |
|
Willi Ballenthin
|
1bee098fb6
|
Merge pull request #734 from fireeye/dependabot/pip/smda-1.6.2
build(deps): bump smda from 1.5.19 to 1.6.2
|
2021-08-23 08:21:00 -06:00 |
|
dependabot[bot]
|
e36e175e08
|
build(deps): bump smda from 1.5.19 to 1.6.2
Bumps [smda](https://github.com/danielplohmann/smda) from 1.5.19 to 1.6.2.
- [Release notes](https://github.com/danielplohmann/smda/releases)
- [Commits](https://github.com/danielplohmann/smda/commits)
---
updated-dependencies:
- dependency-name: smda
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-08-23 14:20:55 +00:00 |
|
Willi Ballenthin
|
9db45d2fcb
|
Merge pull request #732 from fireeye/dependabot/pip/ruamel-yaml-0.17.13
build(deps): bump ruamel-yaml from 0.17.10 to 0.17.13
|
2021-08-23 08:20:07 -06:00 |
|
dependabot[bot]
|
558f5d0c8a
|
build(deps): bump tqdm from 4.62.1 to 4.62.2
Bumps [tqdm](https://github.com/tqdm/tqdm) from 4.62.1 to 4.62.2.
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](https://github.com/tqdm/tqdm/compare/v4.62.1...v4.62.2)
---
updated-dependencies:
- dependency-name: tqdm
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-08-23 14:02:36 +00:00 |
|
dependabot[bot]
|
e32a887091
|
build(deps): bump ruamel-yaml from 0.17.10 to 0.17.13
Bumps [ruamel-yaml](https://sourceforge.net/p/ruamel-yaml/code/ci/default/tree) from 0.17.10 to 0.17.13.
---
updated-dependencies:
- dependency-name: ruamel-yaml
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-08-23 14:02:32 +00:00 |
|
William Ballenthin
|
1b9a6c3c59
|
main: collect os/format/arch into metadata and render it
|
2021-08-20 16:50:40 -06:00 |
|
William Ballenthin
|
aef03b5592
|
elf: fix type error caught by mypy!
|
2021-08-20 15:00:06 -06:00 |
|
William Ballenthin
|
3eaeb533e9
|
Merge branch 'feature-701' of github.com:fireeye/capa into feature-701
|
2021-08-20 14:56:53 -06:00 |
|
William Ballenthin
|
04cc94a450
|
main: detect invalid arch and os
|
2021-08-20 14:56:26 -06:00 |
|
Willi Ballenthin
|
dae7be076d
|
elf: fix alignment calculation
identified over [here](14f9c972b3 (r692441396))
|
2021-08-19 14:45:08 -06:00 |
|
Michael Hunhoff
|
3cb7573edb
|
enable os/arch/format for capa explorer
|
2021-08-19 13:06:43 -06:00 |
|
William Ballenthin
|
a96a5de12d
|
tests: re-enable SMDA ELF API tests
|
2021-08-19 08:02:17 -06:00 |
|
William Ballenthin
|
45b6c8dad3
|
setup: bump SMDA dep ver
closes #725
|
2021-08-19 08:01:17 -06:00 |
|
William Ballenthin
|
cf17ebac33
|
Merge branch 'feature-701' of github.com:fireeye/capa into feature-701
|
2021-08-18 16:33:21 -06:00 |
|
William Ballenthin
|
f0a34fdb5e
|
merge
|
2021-08-18 16:32:58 -06:00 |
|
Willi Ballenthin
|
e124115e8d
|
Merge branch 'master' into feature-701
|
2021-08-18 16:29:05 -06:00 |
|
William Ballenthin
|
249b8498d9
|
pefile: extract Arch
|
2021-08-18 16:27:41 -06:00 |
|
Capa Bot
|
15c69e3b7d
|
Sync capa rules submodule
|
2021-08-18 21:15:01 +00:00 |
|
Capa Bot
|
98208b8eec
|
Sync capa rules submodule
|
2021-08-18 20:50:11 +00:00 |
|
Capa Bot
|
0690e73320
|
Sync capa rules submodule
|
2021-08-18 20:38:06 +00:00 |
|
William Ballenthin
|
766ac7e500
|
Merge branch 'master' of github.com:fireeye/capa into feature-701
|
2021-08-18 14:33:17 -06:00 |
|
Capa Bot
|
51ac57c657
|
Sync capa-testfiles submodule
|
2021-08-18 20:33:02 +00:00 |
|
William Ballenthin
|
89603586da
|
elf: add some doc
|
2021-08-18 14:23:48 -06:00 |
|
William Ballenthin
|
a35f5a1650
|
elf: detect FreeBSD via note
|
2021-08-18 14:21:50 -06:00 |
|
William Ballenthin
|
f1df29d27e
|
tests: xfail smda ELF API
waiting for #725
|
2021-08-18 14:08:36 -06:00 |
|
Willi Ballenthin
|
08c24e2705
|
Merge pull request #729 from doomedraven/patch-1
update capa_as_library for capa v2
|
2021-08-18 08:32:41 -06:00 |
|
doomedraven
|
b1171864e3
|
black
|
2021-08-18 14:25:58 +02:00 |
|
doomedraven
|
5af59cecda
|
update capa_as_library for capa v2
|
2021-08-18 14:23:36 +02:00 |
|
William Ballenthin
|
0c3a38b24b
|
Merge branch 'feature-701' of github.com:fireeye/capa into feature-701
|
2021-08-17 09:07:25 -06:00 |
|
William Ballenthin
|
ac5d163aa0
|
pep8
|
2021-08-17 09:07:08 -06:00 |
|
Willi Ballenthin
|
dfe2dbea6d
|
Merge pull request #722 from fireeye/fix-703
fix reporting of namespace matches
|
2021-08-17 09:05:19 -06:00 |
|
Willi Ballenthin
|
909ffc187b
|
Merge branch 'master' into feature-701
|
2021-08-17 09:00:48 -06:00 |
|
William Ballenthin
|
92dfa99059
|
extractors: log unsupported os/arch/format but don't except
|
2021-08-17 08:57:42 -06:00 |
|
William Ballenthin
|
0065876702
|
extractors: ida: move os extraction to global module
|
2021-08-17 08:57:27 -06:00 |
|