Moritz Raabe
9e0d2ffd7b
account for Windows paths
2020-07-06 13:00:28 +02:00
Moritz
4f6bf0675c
Merge pull request #90 from fireeye/ana-doc-dev
...
Document how to install development dependencies
2020-07-06 11:34:24 +02:00
Moritz
4b5ab6647f
Merge pull request #89 from fireeye/ana-type-comment
...
Fix misplaced type annotation
2020-07-06 11:33:26 +02:00
Ana María Martínez Gómez
6a9842f44f
Fix misplaced type annotation
...
A misplaced type annotation in `capa/main.py` causes that black fails to
solve offenses in this file. It may also make capa fail in newer Python
versions. Replace type by `schema` as we don't use type checker tools.
2020-07-06 08:28:24 +02:00
William Ballenthin
5cd10bfc75
main: load shellcode at 0x690000
...
closes #94
2020-07-03 09:38:48 -06:00
William Ballenthin
5022e00e1a
Merge branch 'master' of github.com:fireeye/capa
2020-07-03 09:33:11 -06:00
Willi Ballenthin
0692e940e9
usage: more words
2020-07-05 14:29:17 -06:00
William Ballenthin
80bdb4a545
pep8
2020-07-03 09:32:58 -06:00
William Ballenthin
5317e1e11e
feature extractor: null: add get_base_address()
...
closes #88
2020-07-03 09:32:37 -06:00
William Ballenthin
0f8267e970
Merge branch 'master' of github.com:fireeye/capa
2020-07-03 09:14:56 -06:00
Willi Ballenthin
1c2d15f1c7
Merge pull request #99 from fireeye/capa-explorer-bug-fix-93
...
capa explorer: bug fix for #93
2020-07-05 14:08:58 -06:00
Willi Ballenthin
515d507447
Merge pull request #100 from fireeye/capa-explorer-support-basicblock-feature
...
capa explorer: add support for "basicblock" feature
2020-07-05 14:05:03 -06:00
Michael Hunhoff
6dc75c5f29
adding support for basicblock feature introduced by 78
2020-07-03 14:34:32 -06:00
Michael Hunhoff
93e7206bb2
removing circular import
2020-07-03 14:32:41 -06:00
Moritz
f52adc6b7e
Merge pull request #97 from fireeye/remove-stale-capa-features-function-imports
...
Remove stale capa features function imports
2020-07-03 20:56:30 +02:00
Michael Hunhoff
d5a8c844db
remove format changes added by black
2020-07-03 12:30:33 -06:00
Michael Hunhoff
f09e683ef5
removing stale imports
2020-07-03 12:24:17 -06:00
William Ballenthin
ca7cf93d18
submodule: rules: update
2020-07-03 09:14:34 -06:00
Ana María Martínez Gómez
26d2f12038
Add Python3 requirement for black
...
When installing the development dependencies with Python2, it fails as
black is not available for Python2.
2020-07-03 11:38:21 +02:00
Ana María Martínez Gómez
2f78c681e4
Document how to install development dependencies
...
Introduced in:
d1dd997b7b
2020-07-03 11:30:39 +02:00
William Ballenthin
b31c76614f
submodule: rules: update
2020-07-03 01:21:58 -06:00
William Ballenthin
fd4e1eed59
submodule: rules: update
2020-07-03 00:58:35 -06:00
Willi Ballenthin
0bc5e4a4f9
readme: add rule example again
2020-07-03 11:47:29 -06:00
Willi Ballenthin
545236cdc2
readme: simplify example
2020-07-03 11:43:47 -06:00
Willi Ballenthin
f4cb8cc5b5
installation: wording
2020-07-03 11:41:48 -06:00
Willi Ballenthin
347f66c396
Merge pull request #92 from fireeye/fix/remove-unused-file
...
remove unused function.py file
2020-07-03 10:56:05 -06:00
Moritz Raabe
58b76f775c
remove unused function.py file
2020-07-03 14:37:46 +02:00
Moritz
6730eb1c5e
Merge pull request #83 from fireeye/fix-count-bb
...
fix #78 count bb
2020-07-03 08:55:09 +02:00
Willi Ballenthin
c6a287fe68
Merge pull request #84 from fireeye/capa-explorer-support-capa-doc-meta
...
capa explorer: adding support for capa doc meta
2020-07-02 18:00:23 -06:00
William Ballenthin
9c4ee19bcc
submodule: rules: update
2020-07-02 17:56:52 -06:00
William Ballenthin
8958e886de
readme: move rule format into capa/rules
2020-07-02 17:56:26 -06:00
Michael Hunhoff
8a6a41583a
adding support for capa doc meta
2020-07-02 17:46:13 -06:00
Willi Ballenthin
60f072f025
readme: update download text
2020-07-02 16:40:30 -06:00
Willi Ballenthin
e14af6a30a
readme: update download text
2020-07-02 16:37:51 -06:00
Willi Ballenthin
9a67cccebb
Merge pull request #81 from fireeye/render-metadata
...
render: report header and metadata
2020-07-02 16:33:32 -06:00
William Ballenthin
959abf9609
pep8
2020-07-02 16:31:48 -06:00
William Ballenthin
1ad8cefd0f
render: ida: move collect_metadata into capa.ida.helpers
2020-07-02 16:31:21 -06:00
William Ballenthin
e13b5c77c6
render: ida: add sha256, filetype
2020-07-02 16:26:55 -06:00
William Ballenthin
ff44801e5c
render: meta: add base address
2020-07-02 16:24:37 -06:00
William Ballenthin
ff46acc18f
main: bubble basic block features into function features
2020-07-02 16:08:04 -06:00
Willi Ballenthin
b49c0ac8d9
Merge pull request #82 from fireeye/fix/string-with-int-val
...
ensure string feature values are strings, tests
2020-07-02 16:00:09 -06:00
William Ballenthin
a50bd4c394
pep8
2020-07-02 15:51:08 -06:00
William Ballenthin
9ad52da6d0
add test for #78
2020-07-02 15:50:56 -06:00
Willi Ballenthin
0c4d96d9b9
Merge pull request #80 from fireeye/capa-explorer-support-feature-description
...
capa explorer: adding support for capa doc description field
2020-07-02 15:45:18 -06:00
Moritz Raabe
8b5f58bf31
ensure string feature values are strings, tests
2020-07-02 23:44:39 +02:00
Willi Ballenthin
96073f876a
Merge pull request #79 from fireeye/fix/verify-scope
...
only allow supported scopes
2020-07-02 15:43:47 -06:00
William Ballenthin
2676649342
pep8
2020-07-02 15:31:47 -06:00
William Ballenthin
6575a019c3
render: add report header and metadata
...
closes #45
2020-07-02 15:31:08 -06:00
Michael Hunhoff
4e5b83c3ed
adding support for description field; bug fix for limit to current function checkbox
2020-07-02 15:15:35 -06:00
Moritz Raabe
8708d254a2
only allow supported scopes
2020-07-02 22:26:18 +02:00
