Mike Hunhoff
580a2d7e45
dotnet: basic detection and feature extraction ( #987 )
2022-04-08 14:55:00 -06:00
William Ballenthin
8903d2abcb
show-capabilities-by-function: also include matches from BBs in fn
2021-10-26 15:05:53 -06:00
William Ballenthin
328e13fbfe
main: compute function & bb layout
...
so bb can be associated with function in output.
only captures BBs that have a rule match,
otherwise, there might be too much data captured.
closes #130 .
2021-10-26 15:04:50 -06:00
Moritz Raabe
8de69c639a
s/fireeye/mandiant
2021-09-29 12:55:16 +02:00
William Ballenthin
1b9a6c3c59
main: collect os/format/arch into metadata and render it
2021-08-20 16:50:40 -06:00
Moritz Raabe
4ca9e168fe
Merge branch 'master' into fix-630
2021-06-28 11:32:27 +02:00
William Ballenthin
40c7401f0a
pep8
2021-06-15 12:28:45 -06:00
William Ballenthin
7f03db9fe4
main: dont save .viv by default, unless CAPA_SAVE_WORKSPACE set
...
closes #507
2021-06-15 12:24:01 -06:00
William Ballenthin
48858e114d
main: refactor handling of rules, signatures cli arguments
2021-06-15 11:54:57 -06:00
William Ballenthin
6f1f928434
main: when --signatures provided, override default set
...
closes #630
2021-06-15 11:43:38 -06:00
William Ballenthin
954ed3a408
pep8
2021-06-09 22:22:03 -06:00
William Ballenthin
ac59e50b5f
move capa/features/__init__.py logic to common.py
...
also cleanup imports across the board,
thanks to pylance.
2021-06-09 22:20:53 -06:00
William Ballenthin
1ee7b7b856
merge master
2021-03-05 15:23:47 -07:00
William Ballenthin
063e1229bc
pep8
2021-03-05 11:10:12 -07:00
William Ballenthin
3a1d5d068c
scripts: use common argument handler
...
closes #449
2021-03-05 10:58:40 -07:00
William Ballenthin
c2a4629c62
scripts: add cli arguments to specify signatures
2021-03-04 15:04:33 -07:00
Ana Maria Martinez Gomez
d28ba3c628
Make backend a required parameter in get_extractor
...
Make the `backend` argument required in the `get_extractor` internal
routine. Specify a backend in the scripts which call this function. Add
a CLI backend option in capa/features/freeze.py as well.
2021-02-25 10:04:19 +01:00
Michael Hunhoff
47b3ef29be
removing viv dep from show-capabilities-by-function.py
2021-02-17 14:49:52 -07:00
Moritz Raabe
34e7991081
black 20.8b1 updates
2020-08-27 11:26:28 +02:00
William Ballenthin
baeea5b6ec
*: update license header to reference Apache 2.0
...
closes #173
2020-07-22 15:05:24 -06:00
Ana María Martínez Gómez
07764fb31f
Use isort 5
...
Run `isort --profile black --length-sort --line-width 120 .`
Update documentation as well.
2020-07-16 22:02:53 +02:00
William Ballenthin
3faf175da7
*: add license header
...
closes #144
2020-07-15 14:14:53 -06:00
William Ballenthin
028b0c3734
pep8
2020-07-14 08:42:54 -06:00
Moritz Raabe
22c3475714
main: output updates
2020-07-09 22:42:34 +02:00
William Ballenthin
091f1d0c41
render: show rules path
...
closes #111
2020-07-06 17:08:55 -06:00
William Ballenthin
ecba9986fc
pep8
2020-07-06 14:07:02 -06:00
William Ballenthin
484179c042
render: move capabilities by function to its own standalone script
2020-07-06 14:06:06 -06:00
