Commit Graph

3433 Commits

Author SHA1 Message Date
Willi Ballenthin
7c652f7737 Merge pull request #105 from fireeye/output-feature-count
Output feature count
2020-07-06 14:09:47 -06:00
William Ballenthin
ecba9986fc pep8 2020-07-06 14:07:02 -06:00
William Ballenthin
ec4fa4c199 main: don't log expected non-rule files 2020-07-06 14:06:37 -06:00
William Ballenthin
484179c042 render: move capabilities by function to its own standalone script 2020-07-06 14:06:06 -06:00
William Ballenthin
845938d4e6 scripts: show-features: add doc 2020-07-06 13:48:30 -06:00
Willi Ballenthin
b32575f6b9 Merge pull request #104 from fireeye/simplify-metadata-rendering
render: simplify metadata display
2020-07-06 13:27:50 -06:00
Willi Ballenthin
758c5dde3c Merge pull request #110 from fireeye/fix/lint-windows-paths
account for Windows paths
2020-07-06 07:38:19 -06:00
Willi Ballenthin
7ee7b143e0 Merge pull request #109 from fireeye/set-rule-scopes
set rule scopes
2020-07-06 07:36:41 -06:00
Moritz Raabe
9e0d2ffd7b account for Windows paths 2020-07-06 13:00:28 +02:00
Moritz Raabe
50d82f98ad after #83 all basic block features are also function scope features 2020-07-06 12:38:39 +02:00
Moritz
4f6bf0675c Merge pull request #90 from fireeye/ana-doc-dev
Document how to install development dependencies
2020-07-06 11:34:24 +02:00
Moritz
4b5ab6647f Merge pull request #89 from fireeye/ana-type-comment
Fix misplaced type annotation
2020-07-06 11:33:26 +02:00
Ana María Martínez Gómez
6a9842f44f Fix misplaced type annotation
A misplaced type annotation in `capa/main.py` causes that black fails to
solve offenses in this file. It may also make capa fail in newer Python
versions. Replace type by `schema` as we don't use type checker tools.
2020-07-06 08:28:24 +02:00
William Ballenthin
a5c3080829 pep8 2020-07-03 21:03:09 -06:00
William Ballenthin
b716fb6980 meta: store feature counts in doc.meta.analysis.feature_counts 2020-07-03 21:02:55 -06:00
William Ballenthin
caa0b3850b render: default: tweak column width for common case 2020-07-03 20:55:31 -06:00
William Ballenthin
c8cb0cd8f7 render: default: remove extra fields from meta 2020-07-03 20:52:53 -06:00
William Ballenthin
f7c460777f render: use list literal 2020-07-03 20:51:41 -06:00
William Ballenthin
9fe70dd19c Merge branch 'master' into output-feature-count 2020-07-03 20:49:39 -06:00
Moritz
f52adc6b7e Merge pull request #97 from fireeye/remove-stale-capa-features-function-imports
Remove stale capa features function imports
2020-07-03 20:56:30 +02:00
Michael Hunhoff
d5a8c844db remove format changes added by black 2020-07-03 12:30:33 -06:00
Michael Hunhoff
f09e683ef5 removing stale imports 2020-07-03 12:24:17 -06:00
William Ballenthin
03dcc92cb3 pep8 2020-07-03 10:41:49 -06:00
William Ballenthin
788f11a865 render: refactor sections and add doc 2020-07-03 10:41:38 -06:00
William Ballenthin
744bbf9f18 pep8 2020-07-03 10:33:24 -06:00
William Ballenthin
ce7fb39aa8 render: show feature counts
closes #96
2020-07-03 10:33:14 -06:00
William Ballenthin
d8a3e5458e Merge branch 'simplify-metadata-rendering' into output-feature-count 2020-07-03 10:14:24 -06:00
William Ballenthin
3b7c8cd1e7 pep8 2020-07-03 10:12:21 -06:00
William Ballenthin
867de57062 main: find_capabilities: extract feature counts per item, too
closes #95
closes #96
2020-07-03 10:12:03 -06:00
William Ballenthin
ff639737b8 render: simplify metadata display
closes #91
2020-07-03 09:49:41 -06:00
William Ballenthin
5cd10bfc75 main: load shellcode at 0x690000
closes #94
2020-07-03 09:38:48 -06:00
William Ballenthin
5022e00e1a Merge branch 'master' of github.com:fireeye/capa 2020-07-03 09:33:11 -06:00
Willi Ballenthin
0692e940e9 usage: more words 2020-07-05 14:29:17 -06:00
William Ballenthin
80bdb4a545 pep8 2020-07-03 09:32:58 -06:00
William Ballenthin
5317e1e11e feature extractor: null: add get_base_address()
closes #88
2020-07-03 09:32:37 -06:00
William Ballenthin
0f8267e970 Merge branch 'master' of github.com:fireeye/capa 2020-07-03 09:14:56 -06:00
Willi Ballenthin
1c2d15f1c7 Merge pull request #99 from fireeye/capa-explorer-bug-fix-93
capa explorer: bug fix for #93
2020-07-05 14:08:58 -06:00
Willi Ballenthin
515d507447 Merge pull request #100 from fireeye/capa-explorer-support-basicblock-feature
capa explorer: add support for "basicblock" feature
2020-07-05 14:05:03 -06:00
Michael Hunhoff
6dc75c5f29 adding support for basicblock feature introduced by 78 2020-07-03 14:34:32 -06:00
Michael Hunhoff
93e7206bb2 removing circular import 2020-07-03 14:32:41 -06:00
William Ballenthin
ca7cf93d18 submodule: rules: update 2020-07-03 09:14:34 -06:00
Ana María Martínez Gómez
26d2f12038 Add Python3 requirement for black
When installing the development dependencies with Python2, it fails as
black is not available for Python2.
2020-07-03 11:38:21 +02:00
Ana María Martínez Gómez
2f78c681e4 Document how to install development dependencies
Introduced in:
d1dd997b7b
2020-07-03 11:30:39 +02:00
William Ballenthin
b31c76614f submodule: rules: update 2020-07-03 01:21:58 -06:00
William Ballenthin
fd4e1eed59 submodule: rules: update 2020-07-03 00:58:35 -06:00
Willi Ballenthin
0bc5e4a4f9 readme: add rule example again 2020-07-03 11:47:29 -06:00
Willi Ballenthin
545236cdc2 readme: simplify example 2020-07-03 11:43:47 -06:00
Willi Ballenthin
f4cb8cc5b5 installation: wording 2020-07-03 11:41:48 -06:00
Willi Ballenthin
347f66c396 Merge pull request #92 from fireeye/fix/remove-unused-file
remove unused function.py file
2020-07-03 10:56:05 -06:00
Moritz Raabe
58b76f775c remove unused function.py file 2020-07-03 14:37:46 +02:00