Commit Graph

3433 Commits

Author SHA1 Message Date
William Ballenthin
0606666e08 ci: run capa on itself to demonstrate rules work 2020-08-04 11:44:41 -06:00
William Ballenthin
ae276d27ab ci: configure win/macos os 2020-08-04 11:39:44 -06:00
William Ballenthin
dd74fae160 ci: attempt to configure gh actions for pyinstaller 2020-08-04 11:31:33 -06:00
William Ballenthin
4bb13d6075 tests: ida: fix offset arch test 2020-08-04 10:35:10 -06:00
William Ballenthin
6aa17782b7 extractors: ida: fix method signature 2020-08-04 10:33:45 -06:00
William Ballenthin
e74b80a318 extractors: ida: add helper method get_function 2020-08-04 10:32:24 -06:00
William Ballenthin
f993efb8f4 extractors: ida: cache data using shared context not globals
attempts to close #218
2020-08-04 10:23:47 -06:00
Willi Ballenthin
f670c25027 Merge pull request #216 from fireeye/fix-210
rules: add support for arch flavors of Number and Offset features
2020-08-04 10:14:03 -06:00
William Ballenthin
8b7a8b0956 rules: address comments in #216 2020-08-04 10:10:52 -06:00
William Ballenthin
e4acfd4852 merge 2020-08-04 09:48:26 -06:00
Willi Ballenthin
cab4cfa0e0 Merge pull request #217 from fireeye/fix-200
features: viv: extract strings/bytes from nested pointers
2020-08-04 09:41:14 -06:00
Capa Bot
e5921e9267 Sync capa rules submodule 2020-08-04 14:35:08 +00:00
William Ballenthin
f02412bcc5 tests: fix function address 2020-08-03 19:10:05 -06:00
William Ballenthin
c3b848183d Revert "ci: use pytest-xdist for parallel testing"
This reverts commit 7458014b21.
2020-08-03 17:56:28 -06:00
William Ballenthin
8550a8bbe9 Revert "ci: use NUM_CPU processes to test"
This reverts commit de0f9043fa.
2020-08-03 17:56:19 -06:00
William Ballenthin
de0f9043fa ci: use NUM_CPU processes to test 2020-08-03 17:51:02 -06:00
William Ballenthin
7458014b21 ci: use pytest-xdist for parallel testing 2020-08-03 17:50:21 -06:00
William Ballenthin
65264f3549 features: viv: refactor reading of byte features 2020-08-03 17:44:06 -06:00
William Ballenthin
b09f29a996 features: viv: extract strings/bytes from nested pointers
closes #200
2020-08-03 17:35:29 -06:00
William Ballenthin
30c1694fa2 submodule: rules update 2020-08-03 16:50:01 -06:00
William Ballenthin
b81b5e5993 rules: add support for arch flavors of Number and Offset features
closes #210
2020-08-03 16:28:47 -06:00
Capa Bot
c982c2d04e Sync capa rules submodule 2020-08-03 20:04:39 +00:00
Capa Bot
1c9f8c2ad5 Sync capa rules submodule 2020-08-03 18:50:43 +00:00
Capa Bot
55b9b83a54 Sync capa rules submodule 2020-08-03 17:02:05 +00:00
Capa Bot
dfc827e6bb Sync capa rules submodule 2020-08-03 16:05:28 +00:00
Capa Bot
9d069b11ba Sync capa-testfiles submodule 2020-08-03 16:04:03 +00:00
Capa Bot
6d2acc8be0 Sync capa rules submodule 2020-08-03 15:44:46 +00:00
Capa Bot
62e9ef4b5e Sync capa rules submodule 2020-07-31 21:18:14 +00:00
Capa Bot
52f9615d63 Sync capa-testfiles submodule 2020-07-31 21:17:04 +00:00
Capa Bot
c704d0b901 Sync capa rules submodule 2020-07-31 20:02:59 +00:00
Capa Bot
6f689574d5 Sync capa-testfiles submodule 2020-07-31 15:43:08 +00:00
Moritz
0f908da36d Merge pull request #215 from fireeye/fix/assert-ida-version-explorer
capa explorer plugin: assert IDA version
2020-07-31 11:43:18 +02:00
Moritz Raabe
418e825c11 pull version assert into helper, fix meta issues 2020-07-30 19:33:05 +02:00
Capa Bot
c26c8d5d5a Sync capa rules submodule 2020-07-30 17:16:42 +00:00
Moritz Raabe
3afbb92159 assert IDA version
closes #179
2020-07-30 16:32:51 +02:00
Capa Bot
42c123456a Sync capa rules submodule 2020-07-29 21:13:35 +00:00
Capa Bot
96f207ca1f Sync capa-testfiles submodule 2020-07-29 21:13:21 +00:00
Ana María Martínez Gómez
56f258dd46 Merge pull request #213 from Ana06/update-hooks 2020-07-29 20:35:15 +02:00
Ana María Martínez Gómez
f9abbbe9ba hooks: change from post- to pre-commit
Avoid erroneous commits. The pre-commit can be skipped with the
`--no-verify` option, which is not available with the post-commit.
Note that `pre-commit` doesn't run when rebase while post-commit did.

This allows to have a single script which is run by both hooks. This
scripts can also be used independently to run the CI setup locally.
2020-07-29 20:25:03 +02:00
Ana María Martínez Gómez
8ff9e339f5 hooks: improve comment in setup-hooks.sh
Previously the `setup-hooks.sh` took care of more things. Consequently
the comments needed to be separated. This is not needed anymore and it
looks weird.
2020-07-29 20:16:58 +02:00
Ana María Martínez Gómez
6d00ae26ae hooks: do not repeat #!/usr/bin/env bash
The comment claims that:
> doesn't matter if `#!/usr/bin/env bash` gets repeated later on in a hooks file

However it is a convetion that there is only one comment like that and
the `setup-hooks.sh` script already takes care of adding it if the file
didn't exist.

Alternatively, we could leave the extra comment and remove the related
code in `setup-hooks.sh`. Currently two comments are added even if the
file didn't exist.
2020-07-29 20:16:56 +02:00
Ana María Martínez Gómez
22fd52ccb9 hooks: do not render git stash output
The `-q` options hides most of the output, but not everything.
2020-07-29 20:16:55 +02:00
Ana María Martínez Gómez
70dda980e8 hooks: update style checkers in hooks
Run `isort` and `black` in the hooks. Run them with the `--check` option
to not modify files which could be committed by accident.

Note that the changes in `.gitignore` are not needed as `.log` is
already excluded in the Django's section. We add those file to this
section in case `.log` is removed in the future.
2020-07-29 20:16:52 +02:00
Capa Bot
4707307a05 Sync capa rules submodule 2020-07-29 15:58:06 +00:00
William Ballenthin
6b94bf24ae Merge branch 'master' of github.com:fireeye/capa 2020-07-28 15:08:28 -06:00
William Ballenthin
c58a2caf9c submodule: rules update 2020-07-28 15:08:14 -06:00
Capa Bot
afbc461852 Sync capa rules submodule 2020-07-28 19:59:43 +00:00
William Ballenthin
7c29360af9 render: fix negative hex numbers
closes #211
2020-07-28 10:46:58 -06:00
William Ballenthin
bc0dac888a Merge branch 'master' of github.com:fireeye/capa 2020-07-28 10:44:48 -06:00
Capa Bot
a29616e40c Sync capa-testfiles submodule 2020-07-28 16:44:40 +00:00