Yacine Elhamer
|
722ee2f3d0
|
remove redundant print
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
|
2023-07-10 12:54:15 +01:00 |
|
Yacine Elhamer
|
e5f5d542d0
|
replace ppid and pid fields with process in thread address
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
|
2023-07-10 12:53:27 +01:00 |
|
Willi Ballenthin
|
1373fabf02
|
Merge pull request #1613 from mandiant/fix/issue-1491
PyPI trusted publishing
|
2023-07-10 13:48:24 +02:00 |
|
Willi Ballenthin
|
320539bd26
|
Merge branch 'master' into fix/issue-1491
|
2023-07-10 13:48:15 +02:00 |
|
Willi Ballenthin
|
ac12d5a7e2
|
Merge pull request #1611 from mandiant/fix/issue-1301
migrate to pyproject.toml
|
2023-07-10 13:45:50 +02:00 |
|
Yacine Elhamer
|
1ac64aca10
|
feature freeze: fix Addres.from_capa() not returning bug
|
2023-07-10 12:44:27 +01:00 |
|
Yacine Elhamer
|
78054eea5a
|
update changelog
|
2023-07-10 12:18:16 +01:00 |
|
Yacine Elhamer
|
ff63b0ff1a
|
rename test_freeze.py to test_static_freeze.py
|
2023-07-10 12:15:38 +01:00 |
|
Yacine Elhamer
|
e2e367f091
|
update tests
|
2023-07-10 12:15:06 +01:00 |
|
Yacine Elhamer
|
5aa1a1afc7
|
initial commit: add ProcessAddress and ThreadAddress
|
2023-07-10 12:14:53 +01:00 |
|
Willi Ballenthin
|
506d677684
|
Merge pull request #1591 from mandiant/fix/issue-1579
use pre-commit to invoke linters
|
2023-07-10 11:58:01 +02:00 |
|
Willi Ballenthin
|
f983307c97
|
Merge branch 'master' into fix/issue-1579
|
2023-07-10 11:57:51 +02:00 |
|
Capa Bot
|
a712bf3389
|
Sync capa rules submodule
|
2023-07-10 09:57:25 +00:00 |
|
Willi Ballenthin
|
a2d6bd693b
|
Merge branch 'dynamic-feature-extraction' into analysis-flavor
|
2023-07-10 10:23:49 +02:00 |
|
Willi Ballenthin
|
7f57fccefb
|
fix lints after sync with master
|
2023-07-10 02:55:50 +02:00 |
|
Willi Ballenthin
|
72e123e319
|
sync master
|
2023-07-10 02:50:18 +02:00 |
|
Willi Ballenthin
|
d29e7140b6
|
Merge pull request #1596 from mandiant/sync-master
Sync master
|
2023-07-10 10:30:23 +02:00 |
|
Willi Ballenthin
|
dc1f2e728d
|
ci: restrict permissions of GITHUB_TOKEN
closes #1616
|
2023-07-10 02:43:48 +02:00 |
|
Willi Ballenthin
|
1f8aa7cfe1
|
changelog
|
2023-07-10 02:07:19 +02:00 |
|
Willi Ballenthin
|
81b964386f
|
ci: publish to PyPI using trusted publishing
closes #1491
|
2023-07-10 02:06:06 +02:00 |
|
Willi Ballenthin
|
cb289e3fc5
|
ci: publish: use trusted publishing
|
2023-07-10 01:57:42 +02:00 |
|
Willi Ballenthin
|
fb176196eb
|
changelog
|
2023-07-10 01:46:06 +02:00 |
|
Willi Ballenthin
|
dd2bbc9a48
|
migrate to pyproject.toml
closes #1301
|
2023-07-10 01:44:38 +02:00 |
|
Willi Ballenthin
|
118b955e10
|
features: fix circular import
|
2023-07-09 23:59:45 +02:00 |
|
Willi Ballenthin
|
d89dd499b6
|
add issue links for TODOs
|
2023-07-09 23:55:36 +02:00 |
|
Willi Ballenthin
|
430f9da449
|
Merge branch 'master' into fix/issue-1579
|
2023-07-10 11:09:25 +02:00 |
|
Willi Ballenthin
|
ae10a2ea34
|
introduce flake8-todos linter
|
2023-07-09 23:35:52 +02:00 |
|
Willi Ballenthin
|
4a49543d12
|
introduce flake8-print linter
|
2023-07-09 22:44:47 +02:00 |
|
Willi Ballenthin
|
106b12e2a4
|
move flake8 config to its own config file
|
2023-07-09 22:35:53 +02:00 |
|
Willi Ballenthin
|
7fe738e28f
|
introduce flake8-no-implicit-concat linter
|
2023-07-09 22:18:01 +02:00 |
|
Willi Ballenthin
|
54203f3be9
|
introduce flake8-logging-format linter
|
2023-07-09 22:11:46 +02:00 |
|
Aayush Goel
|
a949698b86
|
Update fixtures.py
Dealt with encoding methods for how "ping_täst" file name is read.
|
2023-07-09 17:47:09 +05:30 |
|
Aayush Goel
|
673af45c55
|
Update args.sample type to Path and str vs as_posix comparisons
|
2023-07-09 16:02:28 +05:30 |
|
Aayush Goel
|
e0ed8c6e04
|
Resolved the suggestions.
|
2023-07-08 13:51:41 +05:30 |
|
Capa Bot
|
fc1dd401d2
|
Sync capa rules submodule
|
2023-07-08 07:53:28 +00:00 |
|
mr-tz
|
b6580f99db
|
sync submodule
|
2023-07-07 19:37:25 +02:00 |
|
Yacine Elhamer
|
605fbaf803
|
add import asdict from dataclasses
|
2023-07-07 15:33:05 +01:00 |
|
Yacine Elhamer
|
03b0493d29
|
Scopes class: remove __eq__ operator overriding and override __in__ instead
|
2023-07-07 15:31:45 +01:00 |
|
Yacine Elhamer
|
5e295f59a4
|
DEV_SCOPE: add todo comment
|
2023-07-07 15:31:45 +01:00 |
|
mr-tz
|
f3135630d1
|
Merge branch 'master' into sync-master
|
2023-07-07 14:28:13 +02:00 |
|
Moritz
|
4a2902512e
|
Update test_binja_features.py (#1595)
temporarily skip stack string test, while we wait for #1473
|
2023-07-07 14:01:50 +02:00 |
|
Moritz
|
e140fba5df
|
enhance various dynamic-related functions (#1590)
* enhance various dynamic-related functions
* test_cape_features(): update API(NtQueryValueKey) feature count to 7
---------
Co-authored-by: Yacine Elhamer <elhamer.yacine@gmail.com>
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
|
2023-07-07 13:59:12 +02:00 |
|
Yacine Elhamer
|
fa7a7c294e
|
replace usage of __dict__ with dataclasses.asdict()
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
|
2023-07-07 11:01:02 +01:00 |
|
Yacine Elhamer
|
9dd65bfcb9
|
extract_subscope_rules(): use DEV_SCOPE
|
2023-07-07 08:54:19 +01:00 |
|
Aayush Goel
|
a8f1067f8a
|
Fixed Path issue in cache-ruleset.py
|
2023-07-07 12:39:18 +05:30 |
|
Aayush Goel
|
ef9b0737a8
|
Merge branch 'master' into Aayush-Goel-04/Issue#1534
|
2023-07-07 12:05:57 +05:30 |
|
Aayush Goel
|
6218f31ea2
|
Update CHANGELOG.md
Update CHANGELOG.md
Update CHANGELOG.md
Update CHANGELOG.md
|
2023-07-07 12:03:05 +05:30 |
|
Aayush Goel
|
14924174c5
|
convert str(path) usage to path.as_posix() to get str format of Path
Update fixtures.py
|
2023-07-07 12:03:05 +05:30 |
|
Aayush Goel
|
edeb458b33
|
some more changes
|
2023-07-07 12:03:05 +05:30 |
|
Capa Bot
|
b8f277b3c6
|
Sync capa-testfiles submodule
|
2023-07-07 06:26:53 +00:00 |
|