Commit Graph

77 Commits

Author SHA1 Message Date
William Ballenthin 918a47cfb7 git hooks: address shellcheck issues 2020-06-26 19:04:36 -06:00
William Ballenthin d1dd997b7b setup: add dev dependencies
closes #21
2020-06-26 18:59:23 -06:00
William Ballenthin 26fef7c615 *: formatting 2020-06-26 18:44:19 -06:00
William Ballenthin f82e453440 linter: learn to check for unusual meta fields
closes #24
2020-06-26 18:32:17 -06:00
William Ballenthin 8f5f5b329d rule: declare the expected hidden meta fields 2020-06-26 18:31:26 -06:00
William Ballenthin 8ab91269fa linter: learn to check namespace matches rule path
closes #6
2020-06-26 18:23:47 -06:00
William Ballenthin 22537eb936 linter: learn to check filename to match rule name
closes #7
2020-06-26 18:16:20 -06:00
William Ballenthin 5de0884dd2 main: learn to save off the path to each rule 2020-06-26 18:09:51 -06:00
William Ballenthin d32c20d140 linter: check for namespace instead of rule-category 2020-06-26 17:53:37 -06:00
William Ballenthin 35faa20e9e linter: check for namespace instead of rule-category 2020-06-26 17:52:32 -06:00
William Ballenthin 36749df848 submodule: rules: bump to rule-organization PR 2020-06-26 17:49:54 -06:00
William Ballenthin 3e973b4307 scripts: migrate-rules: fixup matches references 2020-06-26 17:43:31 -06:00
William Ballenthin be1a7a06e1 scripts: migrate-rule: respect lib meta 2020-06-25 17:29:08 -06:00
William Ballenthin 45dea2b8aa scripts: migrate rules: respect nursery status 2020-06-22 07:40:55 -06:00
William Ballenthin 11e456f55e Merge branch 'master' of github.com:fireeye/capa 2020-06-22 07:00:57 -06:00
Willi Ballenthin 348e6c0315 Merge pull request #30 from fireeye/capa-explorer-remove-empty-structural-expressions
capa explorer remove empty structural expressions
2020-06-26 16:31:46 -06:00
Michael Hunhoff 65a4960ce9 code changes 2020-06-26 14:44:52 -06:00
Michael Hunhoff 009368f278 removing empty structural expressions from tree view 2020-06-26 14:38:14 -06:00
Willi Ballenthin 68736a07f6 Merge pull request #29 from fireeye/default-sort-capa-explorer
capa explorer tree view default to sorted asc, trim regex matches
2020-06-26 11:51:18 -06:00
Michael Hunhoff 540f68c5c7 tree view default to sorted asc, trim regex matches 2020-06-26 11:28:11 -06:00
Willi Ballenthin 7ff69097db Merge pull request #27 from fireeye/fix/dont-show-subscope-rules
do not display subscope rules in any mode
2020-06-26 11:20:25 -06:00
Moritz Raabe dcd66f41fa do not display subscope rules in any mode 2020-06-26 16:19:07 +02:00
Willi Ballenthin b973d7fc50 Merge pull request #26 from fireeye/vverbose-output-scope-enhancement
enhancements for displaying relevant scope data for vverbose and verbose display
2020-06-25 13:47:00 -06:00
Michael Hunhoff e1f924ffd1 tweak verbose display to remove empty va addresses for file scope 2020-06-25 13:39:05 -06:00
Michael Hunhoff 4740bf576b Merge branch 'master' into vverbose-output-scope-enhancement 2020-06-25 13:23:00 -06:00
Michael Hunhoff 9d5ecadf95 adding support to display appropriate scope name in vverbose mode 2020-06-25 13:22:07 -06:00
Moritz 290af74368 Merge pull request #17 from fireeye/add-warnings-dialog-capa-explorer
adding new checks for file format limitations in capa explorer plugin
2020-06-25 21:07:13 +02:00
Michael Hunhoff 25f0262748 moving code around for supported file type dialouge in standalone tool and capa explorer 2020-06-25 11:09:47 -06:00
Michael Hunhoff a5004b2014 adding support checks for AMD64/binary files in capa explorer and capa main 2020-06-25 10:05:19 -06:00
Michael Hunhoff 83dbf81d2b adding new checks for file format limitations in capa explorer plugin 2020-06-24 16:29:30 -06:00
Willi Ballenthin 9842ae6c8f Merge pull request #10 from fireeye/doc/code-review-improvements
update documentation
2020-06-24 08:23:12 -06:00
Willi Ballenthin 53f374024b Merge branch 'master' into doc/code-review-improvements 2020-06-24 08:22:52 -06:00
Willi Ballenthin fb6d8354bd Merge pull request #11 from fireeye/mr-tz-update-setup-hooks
Update setup-hooks.sh
2020-06-24 08:17:02 -06:00
Willi Ballenthin 3defaf0d22 Merge pull request #13 from fireeye/all-the-single-quotes
double to single quotes
2020-06-24 08:15:58 -06:00
Moritz Raabe beba3fb3c7 double to single quotes 2020-06-24 15:00:35 +02:00
Moritz 95b3b129ec Update setup-hooks.sh 2020-06-24 14:29:50 +02:00
Moritz Raabe 730f0b21fe document -t (tag) option 2020-06-24 13:23:46 +02:00
Moritz d3d7070e95 Merge pull request #9 from fireeye/ana-build
Remove Build Status from README
2020-06-24 13:01:20 +02:00
Moritz Raabe d2d1f26e7b update documentation 2020-06-24 12:55:35 +02:00
Ana María Martínez Gómez 72b6ee5cf3 Remove Build Status from README
This should have been removed as part of the migration. The build status
in the README will be reimplemented using GitHub Actions and
https://shields.io
2020-06-24 12:31:01 +02:00
Willi Ballenthin fa9bb946ed Merge pull request #1 from fireeye/ana-hooks
Add hooks for running linters and tests
2020-06-22 09:42:07 -06:00
Willi Ballenthin 273ca81919 Merge pull request #2 from fireeye/doc/submodule-install
add submodule doc
2020-06-22 09:41:29 -06:00
William Ballenthin dfaa907319 scripts: migrate rules: better variable names 2020-06-22 07:00:23 -06:00
William Ballenthin ffd926c84c scripts: migrate-rules: detect rules that aren't in the migration plan 2020-06-22 06:59:10 -06:00
Moritz Raabe b466087c97 add submodule doc 2020-06-22 12:48:53 +02:00
Ana María Martínez Gómez 96ad823e35 Add hooks for running linters and tests
Add the `scripts/setup-hooks.sh` script which sets the following hooks
up:
- The `post-commit` hook runs the linter after every `git commit`,
  letting you know if there are code style or rule linter offenses you
  need to fix.
- The `pre-push` hook runs the linter and the tests and block the `git
  push` if they do not succeed.
  This way you realise if everything is alright without the need of
  sending a PR.
2020-06-22 11:35:45 +02:00
William Ballenthin 5eddc9d3f4 scripts: migrate-rules: parse ATT&CK from tag name 2020-06-21 17:59:16 -06:00
Willi Ballenthin 8f097b883c Merge pull request #25 from fireeye/rule-organization
apply rule reorganization
2020-06-25 13:42:38 -06:00
William Ballenthin c06a1dae8a scripts: migrate-rules: migrates rules pretty well 2020-06-21 17:40:16 -06:00
William Ballenthin 07daf3d46b rule: fmt: support pulling meta from the rule instance 2020-06-21 16:57:58 -06:00