Willi Ballenthin
a734358377
rules: use Scope enum instead of constants
2023-08-25 12:54:57 +00:00
Willi Ballenthin
4ab240e990
rules: add scope terms "unsupported" and "unspecified"
...
closes #1744
2023-08-22 12:58:06 +00:00
Willi Ballenthin
827b4b29b4
test_rules: fix rule scoping logic
2023-08-15 09:21:49 +00:00
Willi Ballenthin
8202e9e921
main: don't use analysis flavor to filter rules
...
im worried this will interact poorly with our rule cache,
unless we add more handling there, which needs more testing.
so, since the filtering likely has only a small impact on performance,
revert the rule filtering changes for simplicity.
2023-08-11 10:36:59 +00:00
Yacine
95148d445a
test_rules.py: update rules' formatting
...
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com >
2023-08-07 09:47:57 +01:00
Yacine
65ac422e36
test_rules.py: update rules' fomratting
...
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com >
2023-08-07 09:47:37 +01:00
Yacine Elhamer
8dc4adbb5e
fix test_rules.py yaml identation bug
2023-08-04 16:20:37 +01:00
Yacine Elhamer
8b36cd1e35
add call-scope tests
2023-08-04 16:20:37 +01:00
Yacine Elhamer
462024ad03
update tests to explicitely specify scopes
2023-08-01 07:41:47 +01:00
Yacine Elhamer
3d812edc4d
use weakrefs for Scopes instantiation; fix test_rules()
2023-07-27 15:52:39 +01:00
Yacine Elhamer
16e32f8441
add tests
2023-07-27 10:31:45 +01:00
Yacine Elhamer
e38e56ccf6
Merge remote-tracking branch 'parentrepo/dynamic-feature-extraction' into sync-1657
2023-07-20 09:33:48 +01:00
Willi Ballenthin
c86ab51210
fix copyright headers everywhere
2023-07-13 05:03:33 +02:00
Yacine Elhamer
4ee38cbe29
fix linting issues
2023-07-11 14:52:04 +01:00
Yacine Elhamer
12c9154f55
fix flake8 linting issues
2023-07-11 14:40:56 +01:00
Yacine Elhamer
0e312d6dfe
replace unused variable 'r' with '_'
2023-07-11 14:38:52 +01:00
Yacine Elhamer
f86ecfe446
Merge remote-tracking branch 'parentrepo/dynamic-feature-extraction' into analysis-flavor
2023-07-11 10:43:31 +01:00
Willi Ballenthin
72e123e319
sync master
2023-07-10 02:50:18 +02:00
Willi Ballenthin
13a8e252f0
introduce flake8-comprehensions
2023-07-06 20:04:27 +02:00
Yacine Elhamer
32f936ce8c
address review comments
2023-07-06 17:17:18 +01:00
Willi Ballenthin
47074fd129
fix ruff issues
2023-07-06 17:49:40 +02:00
Yacine Elhamer
9300e68225
fix mypy issues in test_rules.py
2023-07-06 00:05:20 +01:00
Yacine Elhamer
19e40a3383
address review comments
2023-07-05 23:58:08 +01:00
Yacine Elhamer
f1d7ac36eb
Update test_rules.py
2023-07-03 02:48:24 +01:00
Yacine Elhamer
21cecb2aec
tests: add unit tests for flavored scopes
2023-07-01 01:51:44 +01:00
Yacine Elhamer
d2ff0af34a
Revert "tests: add unit tests for flavored scopes"
...
This reverts commit 6f0566581e .
2023-07-01 01:39:54 +01:00
Yacine Elhamer
6f0566581e
tests: add unit tests for flavored scopes
2023-07-01 00:57:01 +01:00
Yacine Elhamer
2b163edc0e
add thread scope
2023-06-28 13:08:11 +01:00
Yacine Elhamer
0e01d91cec
update changelog
2023-06-28 01:39:11 +01:00
Pratham Chauhan
efb07fafb3
fix
2023-04-05 22:16:00 +05:30
Pratham Chauhan
3d1ef51863
revert
2023-04-05 17:33:05 +05:30
Pratham Chauhan
a40126aeff
reformatting with black
2023-04-04 19:10:40 +05:30
Pratham Chauhan
a260b35c9d
--fix
2023-04-04 18:28:43 +05:30
Harsh Mehta
74009eb4a4
Updated Copyright ( #1383 )
...
* Updated Copyright
2023-03-14 17:58:43 +01:00
Willi Ballenthin
4b7a9e149f
rules: move to directory structure
2023-01-20 13:27:30 +01:00
Willi Ballenthin
613c185428
tests: fix broken test
2022-12-14 11:51:25 +01:00
Willi Ballenthin
81500a4d1d
black
2022-12-14 10:48:00 +01:00
Willi Ballenthin
b819033da0
lots of mypy
2022-12-14 10:37:39 +01:00
Mike Hunhoff
3c1cd67f60
dotnet: support property feature extraction ( #1168 )
2022-09-09 12:09:41 -06:00
Moritz Raabe
1df60186f0
fix!: authors instead of author
2022-05-31 23:05:13 +02:00
Willi Ballenthin
aee61b35e4
*: remove more references to /x32 and /x64
2022-04-05 10:41:03 -06:00
Willi Ballenthin
ecabd557a7
*: remove /x32 and /x64 flavors from number and offset features
2022-04-05 10:35:41 -06:00
William Ballenthin
2d68fb2536
pep8
2021-11-10 12:51:27 -07:00
William Ballenthin
845df282ef
tests: split out match tests and validate alternative algorithms
2021-11-10 12:44:58 -07:00
William Ballenthin
3b4cb47597
pep8
2021-08-24 11:45:48 -06:00
William Ballenthin
f55e758d47
tests: rules: demonstrate substring with description
2021-08-24 11:45:24 -06:00
William Ballenthin
6989e8b8cf
rules: add substring feature
...
closes #737
2021-08-24 11:35:01 -06:00
William Ballenthin
8e689c39f4
features: add Arch feature at global scope
2021-08-16 17:06:56 -06:00
William Ballenthin
ab1326f858
features: move OS and Format to their own features, not characteristics
2021-08-16 16:28:26 -06:00
William Ballenthin
f013815b2a
features: rename legacy term arch to bitness
...
makes space for upcoming feature `arch: ` for things like i386/amd64/aarch64
2021-08-16 12:21:25 -06:00