Willi Ballenthin
|
1f091a4ccd
|
tests: add tests demonstrating vverbose feature rendering
|
2022-12-07 12:58:10 +00:00 |
|
Mike Hunhoff
|
3c1cd67f60
|
dotnet: support property feature extraction (#1168)
|
2022-09-09 12:09:41 -06:00 |
|
Willi Ballenthin
|
a453258a51
|
tests: fix render test for MBC
|
2022-06-20 14:25:18 -06:00 |
|
Willi Ballenthin
|
246ef58e7b
|
tests: fix render test for ATT&CK metadata
|
2022-06-20 14:24:01 -06:00 |
|
Moritz
|
65552575f8
|
Update dotnet-main (#979)
* Sync capa rules submodule
* Sync capa-testfiles submodule
* Sync capa rules submodule
* changelog
* *: remove /x32 and /x64 flavors from number and offset features
* *: remove more references to /x32 and /x64
* linter: accept instruction scope
* rules: fix max operand index (4)
* API: better support A/W functions
* vverbose: show lib rule matches
* main: accept multiple paths to rules
* main: fix removal of default rules path
* lint: fix rules path
* changelog
* capa_as_library: fix rules path is list now
* main: better handle multiple rules paths
* main: bail if python 3.6 or below
closes #964
* ida: readme: remove python 3.6 support
* capa2yara: fix rules paths
* render: meta: display rule paths on separate lines
closes #971
* render: verbose: add doc
* verbose: make rule path multiline more concise
* vverbose: don't show examples in output
closes #970
* vverbose: render subscope name, like "basic block:"
closes #963
* build(deps-dev): bump pytest from 7.0.1 to 7.1.1
Bumps [pytest](https://github.com/pytest-dev/pytest) from 7.0.1 to 7.1.1.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/7.0.1...7.1.1)
---
updated-dependencies:
- dependency-name: pytest
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* ci: build: update pip and setuptools
* ci: build: bump pyinstall to v4.10
* Sync capa rules submodule
* Dotnet mixed mode detect (#969)
* feat: start dotnet detection (#955)
* feat: start dotnet detection
* Apply suggestions from code review
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
* refactor: dn instead of dotnet
* refactor: format branches, extractor reorg
* refactor: format selection and dotnet detect
* feat: get format, arch, os
* refactor: log errors and exceptions
* ci: also test and build for dotnet-main dev
* fix: import path
* fix: circular dep
* fix: remove buf argument
feat: get runtime meta data
* fix: log unsupported runtime error
* fix: type ignore
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
* fix: imports and add tests
* feat: detect mixed mode and tests
* feat: start dotnet detection (#955)
* feat: start dotnet detection
* Apply suggestions from code review
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
* refactor: dn instead of dotnet
* refactor: format branches, extractor reorg
* refactor: format selection and dotnet detect
* feat: get format, arch, os
* refactor: log errors and exceptions
* ci: also test and build for dotnet-main dev
* fix: import path
* fix: circular dep
* fix: remove buf argument
feat: get runtime meta data
* fix: log unsupported runtime error
* fix: type ignore
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
* fix: imports and add tests
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
* test: checkout submodules recursively
Co-authored-by: Capa Bot <capa-dev@mandiant.com>
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-04-07 17:45:29 +02:00 |
|
William Ballenthin
|
2d68fb2536
|
pep8
|
2021-11-10 12:51:27 -07:00 |
|
William Ballenthin
|
845df282ef
|
tests: split out match tests and validate alternative algorithms
|
2021-11-10 12:44:58 -07:00 |
|
William Ballenthin
|
ac59e50b5f
|
move capa/features/__init__.py logic to common.py
also cleanup imports across the board,
thanks to pylance.
|
2021-06-09 22:20:53 -06:00 |
|
Moritz Raabe
|
94089ff43f
|
parse att&ck for output doc
|
2021-06-02 10:37:19 +02:00 |
|