Yacine Elhamer
|
9ec1bf3e42
|
point rules towards dynamic-syntax
|
2023-09-04 10:38:01 +02:00 |
|
Yacine Elhamer
|
d83c0e70de
|
main.py: remove comment type annotations
|
2023-09-04 09:59:29 +02:00 |
|
Yacine Elhamer
|
1d8e650d7b
|
freeze/__init__.py: bump freeze version to 3
|
2023-09-04 09:50:29 +02:00 |
|
Yacine Elhamer
|
73c158ad68
|
point submodules towards the right branch
|
2023-08-30 11:42:43 +02:00 |
|
Yacine Elhamer
|
47330e69d4
|
verbose.py render_dynamic_meta(): s/doc: rd.ResultDocument/meta: rd.MetaData/g
|
2023-08-29 22:42:18 +02:00 |
|
Yacine Elhamer
|
0987673bf3
|
verbose.py: temporarily add a mypy-related assert to render_static_meta()
|
2023-08-29 22:38:14 +02:00 |
|
Yacine Elhamer
|
2c75f786c3
|
main.py rdoc.Metadata creation: revert to usage of as_posix() within the call to rdoc.Sample()
|
2023-08-29 22:35:49 +02:00 |
|
Yacine Elhamer
|
09afcfbac1
|
render/verbose.py: remove frz.AddressType.FREEZE
|
2023-08-29 22:31:16 +02:00 |
|
Yacine
|
9dc457e61e
|
Update capa/features/freeze/__init__.py
Co-authored-by: Willi Ballenthin <wballenthin@google.com>
|
2023-08-28 15:40:31 +02:00 |
|
Yacine Elhamer
|
9eb88e6ca7
|
Merge branch 'dynamic-feature-extraction' of https://github.com/mandiant/capa into dynamic-feature-extraction
|
2023-08-28 13:24:58 +02:00 |
|
Yacine Elhamer
|
214a355b9c
|
binja extractor: remove unused pathlib.Path import
|
2023-08-28 13:24:54 +02:00 |
|
Yacine
|
4d538b939e
|
Update scripts/import-to-ida.py
Co-authored-by: Willi Ballenthin <wballenthin@google.com>
|
2023-08-27 14:59:10 +02:00 |
|
Yacine Elhamer
|
8c9e676868
|
binja: use binja api's methods to get the file hash
|
2023-08-27 14:31:43 +02:00 |
|
Yacine Elhamer
|
b0133f0aa1
|
various fixes
|
2023-08-26 19:28:07 +02:00 |
|
Yacine Elhamer
|
49adecb25c
|
add yaml representer for the Scope class, as well as other bugfixes
|
2023-08-26 18:11:35 +02:00 |
|
Yacine Elhamer
|
e9a9b3a6b6
|
point the data file to the latest PR
|
2023-08-26 13:04:45 +02:00 |
|
Yacine
|
d5daa79547
|
Merge pull request #1764 from mandiant/fix/scope-enum-usage
rules: use Scope enum instead of constants
|
2023-08-25 20:58:34 +03:00 |
|
Willi Ballenthin
|
9bbd3184b0
|
rules: handle unsupported scopes again
|
2023-08-25 13:15:55 +00:00 |
|
Willi Ballenthin
|
17e4765728
|
changelog
|
2023-08-25 13:00:34 +00:00 |
|
Willi Ballenthin
|
7e258a91ec
|
Merge branch 'dynamic-feature-extraction' into fix/scope-enum-usage
|
2023-08-25 14:59:18 +02:00 |
|
Willi Ballenthin
|
b88853f327
|
changelog
|
2023-08-25 14:59:03 +02:00 |
|
Willi Ballenthin
|
a60401fc7e
|
Merge branch 'master' into dynamic-feature-extraction
|
2023-08-25 14:58:35 +02:00 |
|
Willi Ballenthin
|
a734358377
|
rules: use Scope enum instead of constants
|
2023-08-25 12:54:57 +00:00 |
|
Willi Ballenthin
|
164b08276c
|
extractor: tweak hashes to fix mypy
|
2023-08-25 09:38:23 +00:00 |
|
Willi Ballenthin
|
b930523d44
|
freeze: add TODO issue link
|
2023-08-25 11:32:56 +02:00 |
|
Willi Ballenthin
|
9d21addc6b
|
Merge pull request #1763 from mandiant/v6.1.0
version: v6.1.0
v6.1.0
|
2023-08-25 11:11:59 +02:00 |
|
Willi Ballenthin
|
9accb60eff
|
changelog
|
2023-08-25 09:11:04 +00:00 |
|
Willi Ballenthin
|
61202913a6
|
changelog
|
2023-08-25 09:07:09 +00:00 |
|
Willi Ballenthin
|
2b59fef1b2
|
changelog
|
2023-08-25 09:05:57 +00:00 |
|
Willi Ballenthin
|
ddff8634de
|
changelog
|
2023-08-25 09:04:26 +00:00 |
|
Willi Ballenthin
|
1905f1bfbd
|
changelog
|
2023-08-25 09:02:03 +00:00 |
|
Yacine Elhamer
|
f34b0355e7
|
test_result_document.py: re-enable result-document related tests
|
2023-08-25 10:56:12 +02:00 |
|
Willi Ballenthin
|
7a70bc9b2a
|
version: v6.1.0
|
2023-08-25 08:47:11 +00:00 |
|
Yacine
|
3ee56e3bee
|
Merge pull request #1762 from yelhamer/modify-sample-hashes
Modify sample hashes
|
2023-08-25 10:29:38 +03:00 |
|
Yacine Elhamer
|
49bf2eb6d4
|
base_extractor.py: replace dunder with single underscore for sample_hashes attribute
|
2023-08-25 10:14:25 +02:00 |
|
Yacine Elhamer
|
707dee4c3f
|
base_Extractor.py: make sample_hashes attribute private
|
2023-08-25 09:53:08 +02:00 |
|
Yacine Elhamer
|
0ded827290
|
modify null extractor
|
2023-08-25 08:50:34 +02:00 |
|
Yacine Elhamer
|
f74107d960
|
initial commit
|
2023-08-25 08:37:57 +02:00 |
|
Yacine
|
acd3a30d27
|
Merge pull request #1758 from yelhamer/fix-cape2fmt
Add dynamic scopes to capa2fmt
|
2023-08-24 15:43:34 +03:00 |
|
Yacine Elhamer
|
b636f23e3c
|
Merge branch 'fix-cape2fmt' of https://github.com/yelhamer/capa into fix-cape2fmt
|
2023-08-24 15:01:00 +02:00 |
|
Yacine Elhamer
|
70eae1a6f0
|
freeze/__init__.py: fix missing space
|
2023-08-24 15:00:34 +02:00 |
|
Yacine Elhamer
|
3574bd49bd
|
Merge remote-tracking branch 'parentrepo/dynamic-feature-extraction' into fix-cape2fmt
|
2023-08-24 14:48:07 +02:00 |
|
Yacine Elhamer
|
46217a3acb
|
test_main.py: remove unused pytest
|
2023-08-24 14:47:40 +02:00 |
|
Yacine Elhamer
|
9eb1255b29
|
cape2yara.py: update for use of scopes, and fix bug
|
2023-08-24 14:32:49 +02:00 |
|
Yacine
|
d66f834e54
|
Update tests/test_scripts.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2023-08-24 13:48:32 +02:00 |
|
Yacine Elhamer
|
7c101f01e5
|
test_binja.py: revert ruleset-related xfails
|
2023-08-24 13:36:53 +02:00 |
|
Yacine Elhamer
|
42689ef1da
|
test_main.py: revert ruleset-related xfails
|
2023-08-24 13:30:22 +02:00 |
|
Yacine
|
5ba7325646
|
Merge pull request #1753 from yelhamer/update-linter
Update the rules linter
|
2023-08-23 11:50:51 +03:00 |
|
Yacine
|
86effec1a2
|
capa/rules/__init__.py: merge features from small scopes into larger ones
Co-authored-by: Willi Ballenthin <wballenthin@google.com>
|
2023-08-23 08:49:36 +03:00 |
|
Yacine
|
cdb469eca0
|
capa/features/freeze/__init__.py: remove comment
Co-authored-by: Willi Ballenthin <wballenthin@google.com>
|
2023-08-23 08:45:21 +03:00 |
|