Yacine Elhamer
|
b1e468dae4
|
add tests for the get_sample_hashes() method
|
2023-07-21 11:04:21 +01:00 |
|
Yacine Elhamer
|
16eab6b5e5
|
remove unused commit
|
2023-07-20 11:24:07 +01:00 |
|
Yacine Elhamer
|
d520bfc753
|
fix bugs and add copyrights
|
2023-07-20 11:19:54 +01:00 |
|
Yacine Elhamer
|
301b10d261
|
fix style issues
|
2023-07-20 10:52:43 +01:00 |
|
Yacine Elhamer
|
e38e56ccf6
|
Merge remote-tracking branch 'parentrepo/dynamic-feature-extraction' into sync-1657
|
2023-07-20 09:33:48 +01:00 |
|
Willi Ballenthin
|
21b2aac8b5
|
fixtures: add test cases for forwarded exports
|
2023-07-13 10:31:52 +02:00 |
|
Willi Ballenthin
|
c86ab51210
|
fix copyright headers everywhere
|
2023-07-13 05:03:33 +02:00 |
|
Yacine Elhamer
|
42baa10bcb
|
Merge branch 'process-thread-addresses' of https://github.com/yelhamer/capa into yelhamer-process-thread-addresses
|
2023-07-11 12:07:20 +01:00 |
|
Aayush Goel
|
ef39bc3c3a
|
Merged Changes from PR #1591
|
2023-07-11 01:14:38 +05:30 |
|
Aayush Goel
|
8e346cb411
|
Merge branch 'Aayush-Goel-04/Issue#1534' of https://github.com/Aayush-Goel-04/capa into Aayush-Goel-04/Issue#1534
|
2023-07-11 00:59:21 +05:30 |
|
Aayush Goel
|
d1a1c6875b
|
extractors accept Path instance
|
2023-07-11 00:41:36 +05:30 |
|
Yacine Elhamer
|
e2e367f091
|
update tests
|
2023-07-10 12:15:06 +01:00 |
|
Willi Ballenthin
|
72e123e319
|
sync master
|
2023-07-10 02:50:18 +02:00 |
|
Willi Ballenthin
|
ae10a2ea34
|
introduce flake8-todos linter
|
2023-07-09 23:35:52 +02:00 |
|
Aayush Goel
|
a949698b86
|
Update fixtures.py
Dealt with encoding methods for how "ping_täst" file name is read.
|
2023-07-09 17:47:09 +05:30 |
|
Aayush Goel
|
673af45c55
|
Update args.sample type to Path and str vs as_posix comparisons
|
2023-07-09 16:02:28 +05:30 |
|
Aayush Goel
|
e0ed8c6e04
|
Resolved the suggestions.
|
2023-07-08 13:51:41 +05:30 |
|
Moritz
|
e140fba5df
|
enhance various dynamic-related functions (#1590)
* enhance various dynamic-related functions
* test_cape_features(): update API(NtQueryValueKey) feature count to 7
---------
Co-authored-by: Yacine Elhamer <elhamer.yacine@gmail.com>
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
|
2023-07-07 13:59:12 +02:00 |
|
Aayush Goel
|
14924174c5
|
convert str(path) usage to path.as_posix() to get str format of Path
Update fixtures.py
|
2023-07-07 12:03:05 +05:30 |
|
Willi Ballenthin
|
90e607fe9a
|
flake8
|
2023-07-06 18:11:48 +02:00 |
|
Willi Ballenthin
|
47074fd129
|
fix ruff issues
|
2023-07-06 17:49:40 +02:00 |
|
Aayush Goel
|
c0d712acea
|
Changes os.path to pathlib.Path usage
changed args.rules , args.signatures types in handle_common_args.
|
2023-07-06 05:12:50 +05:30 |
|
Yacine Elhamer
|
6712801b01
|
tests/fixtures.py: update path forming for the cape sample
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
|
2023-06-20 20:30:06 +01:00 |
|
Yacine Elhamer
|
0502bfd95d
|
remove cape report from get_md5_hash() function
|
2023-06-20 20:24:38 +01:00 |
|
Yacine Elhamer
|
0a4e3008af
|
fixtures.py: update CAPE's feature count and presence tests
|
2023-06-20 13:51:16 +01:00 |
|
Yacine Elhamer
|
1532ce1bab
|
add tests for extracting argument values
|
2023-06-20 13:20:33 +01:00 |
|
Yacine Elhamer
|
374fb033c1
|
add support for gzip compressed cape samples, and fix QakBot sample path
|
2023-06-20 10:29:52 +01:00 |
|
Yacine Elhamer
|
4db80e75a4
|
add mode and encoding parameters to open()
|
2023-06-20 10:13:06 +01:00 |
|
Yacine Elhamer
|
8547277958
|
tests/fixtures.py bugfix: remove redundant lambda function
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2023-06-20 10:10:42 +01:00 |
|
Yacine Elhamer
|
ec3366b0e5
|
Update tests/fixtures.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2023-06-20 10:09:27 +01:00 |
|
Yacine Elhamer
|
48bd04b387
|
tests/fixtures.py: return direct extractor with no intermediate variable
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2023-06-20 10:09:00 +01:00 |
|
Yacine Elhamer
|
d4c4a17eb7
|
bugfixes and add cape sample tests
|
2023-06-19 23:42:27 +01:00 |
|
Yacine Elhamer
|
38596f8d0e
|
add features for the QakBot sample
|
2023-06-19 19:32:56 +01:00 |
|
Yacine Elhamer
|
4acdca090d
|
bug fixes
|
2023-06-19 17:14:59 +01:00 |
|
Yacine Elhamer
|
98e7acddf4
|
fix codestyle issues
|
2023-06-19 16:59:27 +01:00 |
|
Yacine Elhamer
|
9458e851c0
|
update test sample's path
|
2023-06-19 16:46:24 +01:00 |
|
Yacine Elhamer
|
a04512d7b8
|
add unit tests for the cape feature extractor
|
2023-06-19 16:43:54 +01:00 |
|
Yacine Elhamer
|
5b260c00f4
|
fix symtab FunctionName feature scope address
|
2023-06-05 13:37:19 +01:00 |
|
Yacine Elhamer
|
41c512624b
|
update symtab-based FunctionName feature extraction
|
2023-06-02 14:44:51 +01:00 |
|
Yacine Elhamer
|
0d42ac3912
|
add missing function-name feature testing
|
2023-06-01 02:14:25 +01:00 |
|
Yacine Elhamer
|
f10a43abe6
|
fix style issues
|
2023-06-01 02:02:40 +01:00 |
|
Yacine Elhamer
|
64ef2c8a65
|
add tests for vivisect's usage of debug symbols
|
2023-06-01 01:50:06 +01:00 |
|
Willi Ballenthin
|
59332c2e94
|
tests: fixtures: add paths for new ELF test file
|
2023-04-03 13:16:03 +02:00 |
|
Pratham Chauhan
|
1b90a28acd
|
resolved merge conflicts
|
2023-03-30 11:05:32 +05:30 |
|
Pratham Chauhan
|
a13ce094b3
|
use rd/test json
|
2023-03-29 19:41:14 +05:30 |
|
Willi Ballenthin
|
4be3fe1628
|
Merge branch 'master' into wb-proto
|
2023-03-24 11:51:45 +01:00 |
|
Willi Ballenthin
|
ddc52fa21c
|
Merge branch 'master' of personal.github.com:mandiant/capa
|
2023-03-23 16:04:54 +01:00 |
|
Willi Ballenthin
|
7d12942cf7
|
Merge branch 'binja_backend' of github.com:Vector35/capa into Vector35-binja_backend
|
2023-03-23 11:31:25 +01:00 |
|
Willi Ballenthin
|
c52b0a22e0
|
tests: simplify loading of result document from file
|
2023-03-23 11:04:53 +01:00 |
|
Willi Ballenthin
|
e8ddee4782
|
Merge branch 'master' of personal.github.com:mandiant/capa into wb-proto
|
2023-03-23 10:35:30 +01:00 |
|