Yacine Elhamer
|
a99ff813cb
|
DynamicFeatureExtractor: remove get_base_address() method
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
|
2023-06-27 11:22:35 +01:00 |
|
Yacine Elhamer
|
92734416a6
|
update base_extractor.py example
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
|
2023-06-27 11:20:41 +01:00 |
|
Yacine Elhamer
|
2f32d4fe49
|
Update base_extractor.py with review comments
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
|
2023-06-27 11:20:02 +01:00 |
|
Willi Ballenthin
|
81d35eb645
|
Merge branch 'dynamic-feature-extraction' into static-extractor
|
2023-06-27 09:42:16 +02:00 |
|
Willi Ballenthin
|
ac24ac2507
|
Merge pull request #1566 from yelhamer/dynamic-show-features
integrate the CAPE extractor with the show-features.py script
|
2023-06-27 09:37:27 +02:00 |
|
Willi Ballenthin
|
39bb4ed842
|
Merge pull request #1570 from mandiant/dependabot/pip/ruff-0.0.275
build(deps-dev): bump ruff from 0.0.270 to 0.0.275
|
2023-06-27 09:34:23 +02:00 |
|
dependabot[bot]
|
8edeb0e6e8
|
build(deps-dev): bump ruff from 0.0.270 to 0.0.275
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.0.270 to 0.0.275.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/BREAKING_CHANGES.md)
- [Commits](https://github.com/astral-sh/ruff/compare/v0.0.270...v0.0.275)
---
updated-dependencies:
- dependency-name: ruff
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-06-27 07:33:03 +00:00 |
|
Willi Ballenthin
|
e3b58eac67
|
Merge pull request #1573 from mandiant/dependabot/pip/mypy-1.4.1
build(deps-dev): bump mypy from 1.3.0 to 1.4.1
|
2023-06-27 09:32:25 +02:00 |
|
Willi Ballenthin
|
8b23a86d2e
|
Merge branch 'master' into dependabot/pip/mypy-1.4.1
|
2023-06-27 09:32:14 +02:00 |
|
Willi Ballenthin
|
d95acc9734
|
Merge pull request #1574 from mandiant/dependabot/pip/pytest-7.4.0
build(deps-dev): bump pytest from 7.3.1 to 7.4.0
|
2023-06-27 09:32:03 +02:00 |
|
Yacine Elhamer
|
b172f9a354
|
FeatureExtractor alias: fix mypy typing issues by adding ininstance-based assert statements
|
2023-06-26 22:46:27 +01:00 |
|
Yacine Elhamer
|
63e4d3d5eb
|
fix TypeAlias importing: import from typing_extensions to support Python 3.9 and lower
|
2023-06-26 21:14:17 +01:00 |
|
Yacine Elhamer
|
c74c8871f8
|
scripts: add type-related assert statements
|
2023-06-26 21:06:35 +01:00 |
|
Yacine Elhamer
|
3f5d08aedb
|
base_extractor.py: add TypeAlias keyword, use union instead of bar operator, add an extract_file_features() and extract_global_features() methods
|
2023-06-26 20:57:51 +01:00 |
|
Yacine Elhamer
|
ddcb299834
|
main.py: address review suggestions (using elif for type casts, renaming to find_static_capabilities())
|
2023-06-26 20:53:41 +01:00 |
|
Yacine Elhamer
|
a9f70dd1e5
|
main.py: update extractor type casting
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
|
2023-06-26 20:01:30 +01:00 |
|
dependabot[bot]
|
7c72b56a4e
|
build(deps-dev): bump pytest from 7.3.1 to 7.4.0
Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.3.1 to 7.4.0.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/7.3.1...7.4.0)
---
updated-dependencies:
- dependency-name: pytest
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-06-26 14:58:39 +00:00 |
|
dependabot[bot]
|
8429d6b8e2
|
build(deps-dev): bump mypy from 1.3.0 to 1.4.1
Bumps [mypy](https://github.com/python/mypy) from 1.3.0 to 1.4.1.
- [Commits](https://github.com/python/mypy/compare/v1.3.0...v1.4.1)
---
updated-dependencies:
- dependency-name: mypy
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-06-26 14:58:26 +00:00 |
|
Yacine Elhamer
|
aff0c6b49b
|
show-featurex.py: bugfix in ida_main()
|
2023-06-26 09:41:14 +01:00 |
|
Yacine Elhamer
|
417bb42ac8
|
show_features.py: rename show_{function,process}_features to show_{static,dynamic}_features.py
|
2023-06-26 09:16:59 +01:00 |
|
Yacine Elhamer
|
040ed4fa57
|
get_format_from_report(): use strings instead of literals
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2023-06-26 09:05:20 +01:00 |
|
Yacine Elhamer
|
94fc7b4e9a
|
FeatureExtractor alias: add type casts to either StaticFeatureExtractor or DynamicFeatureExtractor
|
2023-06-26 01:23:01 +01:00 |
|
Yacine Elhamer
|
172e7a7649
|
update changelog
|
2023-06-25 23:03:13 +01:00 |
|
Yacine Elhamer
|
37ed138dcf
|
base_extractor(): add a StaticFeatureExtractor and DynamicFeatureExtractor base classes, as well as a FeatureExtractor type alias
|
2023-06-25 22:57:39 +01:00 |
|
Aayush Goel
|
842f76c8bd
|
Merge branch 'mandiant:master' into Aayush-Goel-04/Issue#1534
|
2023-06-26 00:35:55 +05:30 |
|
Aayush Goel
|
157dfac527
|
Current os.apth to pathlib.Path
need to update args type
Revert "Current os.apth to pathlib.Path"
This reverts commit 170fe9ad93b0a4d44a08470633133c0d32ccef24.
|
2023-06-26 00:34:12 +05:30 |
|
Yacine Elhamer
|
5f6aade92b
|
get_format_from_report(): fix bugs and add a list of dynamic formats
|
2023-06-25 00:54:55 +01:00 |
|
Yacine Elhamer
|
0c62a5736e
|
add support for determining the format of a sandbox report
|
2023-06-24 23:51:12 +01:00 |
|
Capa Bot
|
a92d91e82a
|
Sync capa rules submodule
|
2023-06-24 08:21:24 +00:00 |
|
Yacine Elhamer
|
f1406c1ffd
|
scripts/show-features.py: prefix {static,dynamic}_analysis() functions' name with 'print_'
|
2023-06-23 13:58:34 +01:00 |
|
Yacine Elhamer
|
1cdc3e5232
|
fix codestyle
|
2023-06-23 13:48:49 +01:00 |
|
Yacine Elhamer
|
bd9870254e
|
Apply suggestions from code review: use EXTENSIONS_CAPE, and ident 'thread' by one more space
|
2023-06-23 13:31:35 +01:00 |
|
Yacine Elhamer
|
0442b8c1e1
|
Apply suggestions from code review: use is_ for booleans
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
|
2023-06-23 13:27:20 +01:00 |
|
Yacine Elhamer
|
585876d6af
|
capa/main.py: use "rb" for opening json files
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
|
2023-06-23 13:25:37 +01:00 |
|
Yacine Elhamer
|
902d726ea6
|
capa/main.py: change json import positioning to start of the file
|
2023-06-22 23:57:03 +01:00 |
|
Yacine Elhamer
|
3f35b426dd
|
Apply suggestions from code review
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2023-06-22 21:58:01 +01:00 |
|
Yacine Elhamer
|
761d861888
|
Update fixtures.py samples path
|
2023-06-22 16:55:00 +01:00 |
|
Yacine Elhamer
|
9f185ed5c0
|
remove incompatible bar union syntax
|
2023-06-22 15:59:23 +01:00 |
|
Yacine Elhamer
|
63b2077335
|
get_extractor(): set return type to FeatureExtractor, and cast into the appropriate class before each usage
|
2023-06-22 15:55:24 +01:00 |
|
Yacine Elhamer
|
12d5beec6e
|
add type cast to fix get_extractor() typing issues
|
2023-06-22 15:51:56 +01:00 |
|
Yacine Elhamer
|
b77e68df19
|
fix codestyle and typing
|
2023-06-22 14:17:06 +01:00 |
|
Yacine Elhamer
|
fcdd4fa410
|
update changelog
|
2023-06-22 14:03:01 +01:00 |
|
Yacine Elhamer
|
07c48bca68
|
scripts/show-features.py: add dynamic feature extraction from cape reports
|
2023-06-22 13:56:54 +01:00 |
|
Yacine Elhamer
|
79ff76d124
|
main.py: fix bugs for adding the cape extractor/format
|
2023-06-22 13:55:50 +01:00 |
|
Yacine Elhamer
|
de2ba1ca94
|
add the cape report format to main and across several other locations
|
2023-06-22 12:55:39 +01:00 |
|
Yacine Elhamer
|
45002bd51d
|
Revert "scripts/show-features.py: add dynamic feature extraction from cape reports"
This reverts commit 64189a4d08.
|
2023-06-22 12:29:51 +01:00 |
|
Yacine Elhamer
|
be7ebad956
|
Revert "tests/fixtures.py: update path forming for the cape sample"
This reverts commit 6712801b01.
|
2023-06-22 12:18:34 +01:00 |
|
Yacine Elhamer
|
64189a4d08
|
scripts/show-features.py: add dynamic feature extraction from cape reports
|
2023-06-22 12:16:31 +01:00 |
|
Capa Bot
|
33a3170bc4
|
Sync capa rules submodule
|
2023-06-22 07:11:54 +00:00 |
|
Willi Ballenthin
|
708cb28ed0
|
Merge pull request #1546 from yelhamer/cape-extractor
add the CAPE feature extractor
|
2023-06-21 09:33:26 +02:00 |
|