Commit Graph

771 Commits

Author SHA1 Message Date
Christian Clauss
5f184b278f Undefined name: import ida_funcs for lines 48, 52, 57 2020-09-07 09:48:42 +02:00
Capa Bot
6044275346 Sync capa rules submodule 2020-09-03 18:51:13 +00:00
Capa Bot
e10f6a2d58 Sync capa-testfiles submodule 2020-09-03 18:22:59 +00:00
Willi Ballenthin
c4eab0de2b Merge pull request #287 from fireeye/fix-286
fix 286
2020-09-02 14:50:24 -06:00
Willi Ballenthin
cf961a7c92 Merge branch 'master' into fix-286 2020-09-02 14:46:30 -06:00
Willi Ballenthin
8f820e4bb8 Merge pull request #285 from fireeye/fix-212-2
ida plugin: add search bar
2020-09-02 14:45:12 -06:00
Willi Ballenthin
e23e552084 ida plugin: fix typo 2020-09-02 14:38:13 -06:00
Willi Ballenthin
d964e82fdc Merge pull request #284 from fireeye/fix-224
render: dont display rules that are also matched as subrule matches
2020-09-02 14:36:47 -06:00
Willi Ballenthin
f6f7b46fa0 Merge branch 'fix-212-2' into fix-286 2020-09-02 13:57:43 -06:00
Willi Ballenthin
e45151cdb8 Merge branch 'fix-212-2' of github.com:fireeye/capa into fix-212-2 2020-09-02 13:56:26 -06:00
Willi Ballenthin
e8cf19caf4 ida plugin: fix context menu 2020-09-02 13:55:46 -06:00
Willi Ballenthin
aebdc60c7e ida plugin: filter on all columns 2020-09-02 13:55:16 -06:00
William Ballenthin
e5f2ed4920 pep8 2020-09-02 13:16:43 -06:00
William Ballenthin
5506175bff Merge branch 'fix-212-2' into fix-286 2020-09-02 13:15:11 -06:00
William Ballenthin
e2c0a702b1 pep8 2020-09-02 13:14:45 -06:00
Willi Ballenthin
398f685b08 ida plugin: remove summary tab 2020-09-02 13:10:46 -06:00
Willi Ballenthin
2e0ab52a77 ida plugin: show tree view by default 2020-09-02 13:07:23 -06:00
Willi Ballenthin
a2a65b7553 ida plugin: show rule namespace in details column 2020-09-02 13:05:38 -06:00
Willi Ballenthin
881c7984aa ida plugin: search for matches across all columns 2020-09-02 13:05:18 -06:00
Capa Bot
7de0a5414a Sync capa rules submodule 2020-09-02 18:26:38 +00:00
Willi Ballenthin
98143d13f8 ida plugin: add search bar
closes #212
2020-09-02 12:01:09 -06:00
William Ballenthin
a25a86e2d6 render: dont display rules that are also matched as subrule matches
closes #224
2020-09-02 10:20:54 -06:00
Willi Ballenthin
0833f06439 Merge pull request #283 from fireeye/enhancements/ida-plugin-2
Various enhancements IDA plugin
2020-09-02 10:19:53 -06:00
Moritz Raabe
7e9a3d649a use embedded icon
(cherry picked from commit bbc41dff09)
2020-09-02 17:50:25 +02:00
Moritz Raabe
d6aa10164a menu changes and rebase hook
(cherry picked from commit 2924c973eb)
2020-09-02 17:16:11 +02:00
Moritz Raabe
198fabdd2d add form icon and other cosmetic changes
(cherry picked from commit 98ed862d3c)
2020-09-02 17:15:16 +02:00
Moritz
ba47455a0c Merge pull request #281 from fireeye/fix-275-3
provide an icon for the ida plugin
2020-09-02 16:32:36 +02:00
Willi Ballenthin
e65e2b8706 ida: document the embedded icon
(cherry picked from commit 84757ed97d)
2020-09-02 14:03:01 +02:00
Willi Ballenthin
e28c8a16eb ida: plugin: use icon
closes #275

(cherry picked from commit f0f958b28e)
2020-09-02 14:02:35 +02:00
Moritz
76ab5da49b Merge pull request #278 from fireeye/fix-268
ida: use ida-settings to persist rules directory
2020-09-02 09:27:57 +02:00
William Ballenthin
3d6d38c4fb setup: fix ida-settings spec 2020-09-01 17:53:10 -06:00
William Ballenthin
ea6698e27a pep8 2020-09-01 17:52:29 -06:00
Willi Ballenthin
b611ddeb6e ida: use ida-settings to persist rules directory
closes #268
2020-09-01 16:12:50 -06:00
Willi Ballenthin
bf90dc075e Merge pull request #274 from fireeye/fix-246
fix 246
2020-09-01 15:51:58 -06:00
William Ballenthin
99d5f06383 pep8 2020-09-01 15:50:24 -06:00
Capa Bot
b386933a04 Sync capa rules submodule 2020-09-01 18:13:40 +00:00
Willi Ballenthin
76447d65a0 Merge pull request #277 from fireeye/fix-276
fix 276
2020-09-01 11:36:23 -06:00
Capa Bot
08099f93a1 Sync capa-testfiles submodule 2020-09-01 16:56:04 +00:00
Willi Ballenthin
cbabf5650d Merge pull request #273 from fireeye/fix-263
fix 263
2020-09-01 10:50:41 -06:00
Willi Ballenthin
82f20f102e Merge pull request #272 from fireeye/fix-262
fix 262
2020-09-01 10:50:17 -06:00
William Ballenthin
2b2656c2a3 features: extractors: merge import and API variant generators 2020-09-01 01:04:51 -06:00
William Ballenthin
330c0f055e Merge branch 'master' into fix-246 2020-08-31 22:30:39 -06:00
William Ballenthin
d272006873 features: insn: viv: extract offset from SibOper operands
closes #276
2020-08-31 20:41:45 -06:00
William Ballenthin
5f7f718fe4 tests: add test for #276 2020-08-31 20:31:36 -06:00
William Ballenthin
13abd175aa pep8 2020-08-31 17:15:30 -06:00
William Ballenthin
090ec46ca4 features: extract import A/W variants and their base names
closes #246
2020-08-31 17:13:10 -06:00
William Ballenthin
5b349c1df8 tests: add feature tests for #246 2020-08-31 16:59:55 -06:00
William Ballenthin
7310b0feda rules: documentation formatting 2020-08-31 16:55:54 -06:00
William Ballenthin
7e0ebb8c5b rules: fmt: fix formatting of description block
closes #263
2020-08-31 16:49:54 -06:00
William Ballenthin
0734edf6f0 tests: fmt: add test for #263 2020-08-31 16:34:10 -06:00