Yacine Elhamer
|
462024ad03
|
update tests to explicitely specify scopes
|
2023-08-01 07:41:47 +01:00 |
|
Yacine Elhamer
|
3d812edc4d
|
use weakrefs for Scopes instantiation; fix test_rules()
|
2023-07-27 15:52:39 +01:00 |
|
Yacine Elhamer
|
16e32f8441
|
add tests
|
2023-07-27 10:31:45 +01:00 |
|
Yacine Elhamer
|
e38e56ccf6
|
Merge remote-tracking branch 'parentrepo/dynamic-feature-extraction' into sync-1657
|
2023-07-20 09:33:48 +01:00 |
|
Willi Ballenthin
|
c86ab51210
|
fix copyright headers everywhere
|
2023-07-13 05:03:33 +02:00 |
|
Yacine Elhamer
|
4ee38cbe29
|
fix linting issues
|
2023-07-11 14:52:04 +01:00 |
|
Yacine Elhamer
|
12c9154f55
|
fix flake8 linting issues
|
2023-07-11 14:40:56 +01:00 |
|
Yacine Elhamer
|
0e312d6dfe
|
replace unused variable 'r' with '_'
|
2023-07-11 14:38:52 +01:00 |
|
Yacine Elhamer
|
f86ecfe446
|
Merge remote-tracking branch 'parentrepo/dynamic-feature-extraction' into analysis-flavor
|
2023-07-11 10:43:31 +01:00 |
|
Willi Ballenthin
|
72e123e319
|
sync master
|
2023-07-10 02:50:18 +02:00 |
|
Willi Ballenthin
|
13a8e252f0
|
introduce flake8-comprehensions
|
2023-07-06 20:04:27 +02:00 |
|
Yacine Elhamer
|
32f936ce8c
|
address review comments
|
2023-07-06 17:17:18 +01:00 |
|
Willi Ballenthin
|
47074fd129
|
fix ruff issues
|
2023-07-06 17:49:40 +02:00 |
|
Yacine Elhamer
|
9300e68225
|
fix mypy issues in test_rules.py
|
2023-07-06 00:05:20 +01:00 |
|
Yacine Elhamer
|
19e40a3383
|
address review comments
|
2023-07-05 23:58:08 +01:00 |
|
Yacine Elhamer
|
f1d7ac36eb
|
Update test_rules.py
|
2023-07-03 02:48:24 +01:00 |
|
Yacine Elhamer
|
21cecb2aec
|
tests: add unit tests for flavored scopes
|
2023-07-01 01:51:44 +01:00 |
|
Yacine Elhamer
|
d2ff0af34a
|
Revert "tests: add unit tests for flavored scopes"
This reverts commit 6f0566581e.
|
2023-07-01 01:39:54 +01:00 |
|
Yacine Elhamer
|
6f0566581e
|
tests: add unit tests for flavored scopes
|
2023-07-01 00:57:01 +01:00 |
|
Yacine Elhamer
|
2b163edc0e
|
add thread scope
|
2023-06-28 13:08:11 +01:00 |
|
Yacine Elhamer
|
0e01d91cec
|
update changelog
|
2023-06-28 01:39:11 +01:00 |
|
Pratham Chauhan
|
efb07fafb3
|
fix
|
2023-04-05 22:16:00 +05:30 |
|
Pratham Chauhan
|
3d1ef51863
|
revert
|
2023-04-05 17:33:05 +05:30 |
|
Pratham Chauhan
|
a40126aeff
|
reformatting with black
|
2023-04-04 19:10:40 +05:30 |
|
Pratham Chauhan
|
a260b35c9d
|
--fix
|
2023-04-04 18:28:43 +05:30 |
|
Harsh Mehta
|
74009eb4a4
|
Updated Copyright (#1383)
* Updated Copyright
|
2023-03-14 17:58:43 +01:00 |
|
Willi Ballenthin
|
4b7a9e149f
|
rules: move to directory structure
|
2023-01-20 13:27:30 +01:00 |
|
Willi Ballenthin
|
613c185428
|
tests: fix broken test
|
2022-12-14 11:51:25 +01:00 |
|
Willi Ballenthin
|
81500a4d1d
|
black
|
2022-12-14 10:48:00 +01:00 |
|
Willi Ballenthin
|
b819033da0
|
lots of mypy
|
2022-12-14 10:37:39 +01:00 |
|
Mike Hunhoff
|
3c1cd67f60
|
dotnet: support property feature extraction (#1168)
|
2022-09-09 12:09:41 -06:00 |
|
Moritz Raabe
|
1df60186f0
|
fix!: authors instead of author
|
2022-05-31 23:05:13 +02:00 |
|
Willi Ballenthin
|
aee61b35e4
|
*: remove more references to /x32 and /x64
|
2022-04-05 10:41:03 -06:00 |
|
Willi Ballenthin
|
ecabd557a7
|
*: remove /x32 and /x64 flavors from number and offset features
|
2022-04-05 10:35:41 -06:00 |
|
William Ballenthin
|
2d68fb2536
|
pep8
|
2021-11-10 12:51:27 -07:00 |
|
William Ballenthin
|
845df282ef
|
tests: split out match tests and validate alternative algorithms
|
2021-11-10 12:44:58 -07:00 |
|
William Ballenthin
|
3b4cb47597
|
pep8
|
2021-08-24 11:45:48 -06:00 |
|
William Ballenthin
|
f55e758d47
|
tests: rules: demonstrate substring with description
|
2021-08-24 11:45:24 -06:00 |
|
William Ballenthin
|
6989e8b8cf
|
rules: add substring feature
closes #737
|
2021-08-24 11:35:01 -06:00 |
|
William Ballenthin
|
8e689c39f4
|
features: add Arch feature at global scope
|
2021-08-16 17:06:56 -06:00 |
|
William Ballenthin
|
ab1326f858
|
features: move OS and Format to their own features, not characteristics
|
2021-08-16 16:28:26 -06:00 |
|
William Ballenthin
|
f013815b2a
|
features: rename legacy term arch to bitness
makes space for upcoming feature `arch: ` for things like i386/amd64/aarch64
|
2021-08-16 12:21:25 -06:00 |
|
William Ballenthin
|
753b003107
|
pep8
|
2021-08-11 09:23:41 -06:00 |
|
William Ballenthin
|
97092c91db
|
tests: assert absence of the wrong os/format
|
2021-08-11 09:13:56 -06:00 |
|
William Ballenthin
|
06f8943bc4
|
features: add format/pe and format/elf characteristics
|
2021-08-11 09:10:04 -06:00 |
|
William Ballenthin
|
a1eca58d7a
|
features: support characteristic(os/*) features
|
2021-08-11 08:40:40 -06:00 |
|
William Ballenthin
|
527e993bb4
|
engine: remove dependency on rules, fixing circular import
|
2021-06-09 22:30:43 -06:00 |
|
William Ballenthin
|
ac59e50b5f
|
move capa/features/__init__.py logic to common.py
also cleanup imports across the board,
thanks to pylance.
|
2021-06-09 22:20:53 -06:00 |
|
Moritz Raabe
|
94089ff43f
|
parse att&ck for output doc
|
2021-06-02 10:37:19 +02:00 |
|
Willi Ballenthin
|
bd63ded1dd
|
file scope API features (#568)
* smda: minor unrelated fixes
* file features: extract API features at file scope for library functions
closes #567
* changelog
* ida: add file-scope API feature
Co-authored-by: mike-hunhoff <mike.hunhoff@gmail.com>
* fix lints from pylance
* features: use "function-name" for recognized linked functions
* pep8
* pep8
* rules: remove incorrect feature scope
* tests: xfail SMDA tests relying on function id
* tests: fixtures: order tests by sample, ideally improving memory usage
* pep8
* pep8
* smda: xfail two more tests
Co-authored-by: mike-hunhoff <mike.hunhoff@gmail.com>
|
2021-05-27 12:59:00 -06:00 |
|