Willi Ballenthin
|
aee61b35e4
|
*: remove more references to /x32 and /x64
|
2022-04-05 10:41:03 -06:00 |
|
Willi Ballenthin
|
ecabd557a7
|
*: remove /x32 and /x64 flavors from number and offset features
|
2022-04-05 10:35:41 -06:00 |
|
Willi Ballenthin
|
f246a01484
|
changelog
|
2022-04-05 10:24:55 -06:00 |
|
Willi Ballenthin
|
df03932f89
|
gitignore
|
2022-04-04 16:54:51 -06:00 |
|
Willi Ballenthin
|
b2b4471851
|
Merge pull request #930 from mandiant/feature-insn-scope
feature: instruction scope
|
2022-04-04 16:42:56 -06:00 |
|
Willi Ballenthin
|
5ffb73c5f5
|
ida: insn: extract operand number and offset features
|
2022-04-04 15:13:43 -06:00 |
|
Willi Ballenthin
|
ef93fcc89e
|
tests: smda: xfail operand number/offset features
|
2022-04-04 12:05:15 -06:00 |
|
Willi Ballenthin
|
0af60d9a7e
|
freeze: fix mypy
|
2022-04-04 12:01:13 -06:00 |
|
Willi Ballenthin
|
750803c3cc
|
freeze: register operand features
|
2022-04-04 11:57:02 -06:00 |
|
Willi Ballenthin
|
b318b0a288
|
freeze: fix freeze_deserialize for features with multiple args
|
2022-04-04 11:56:47 -06:00 |
|
Willi Ballenthin
|
2989af0a3f
|
features: use ABC to denote abstract classes
|
2022-04-04 11:49:51 -06:00 |
|
Moritz
|
3f168772aa
|
Merge pull request #934 from mandiant/dependabot/pip/types-colorama-0.4.10
build(deps-dev): bump types-colorama from 0.4.9 to 0.4.10
|
2022-04-04 17:42:16 +02:00 |
|
Moritz
|
2ba25f096d
|
Merge pull request #935 from mandiant/dependabot/pip/types-requests-2.27.16
build(deps-dev): bump types-requests from 2.27.15 to 2.27.16
|
2022-04-04 17:42:02 +02:00 |
|
Moritz
|
6d35e19571
|
Merge pull request #933 from mandiant/dependabot/pip/tqdm-4.64.0
build(deps): bump tqdm from 4.63.1 to 4.64.0
|
2022-04-04 17:41:56 +02:00 |
|
dependabot[bot]
|
0d9583f7e7
|
build(deps-dev): bump types-requests from 2.27.15 to 2.27.16
Bumps [types-requests](https://github.com/python/typeshed) from 2.27.15 to 2.27.16.
- [Release notes](https://github.com/python/typeshed/releases)
- [Commits](https://github.com/python/typeshed/commits)
---
updated-dependencies:
- dependency-name: types-requests
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-04-04 14:12:27 +00:00 |
|
dependabot[bot]
|
fe6b18135c
|
build(deps-dev): bump types-colorama from 0.4.9 to 0.4.10
Bumps [types-colorama](https://github.com/python/typeshed) from 0.4.9 to 0.4.10.
- [Release notes](https://github.com/python/typeshed/releases)
- [Commits](https://github.com/python/typeshed/commits)
---
updated-dependencies:
- dependency-name: types-colorama
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-04-04 14:12:24 +00:00 |
|
dependabot[bot]
|
e89fe57def
|
build(deps): bump tqdm from 4.63.1 to 4.64.0
Bumps [tqdm](https://github.com/tqdm/tqdm) from 4.63.1 to 4.64.0.
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](https://github.com/tqdm/tqdm/compare/v4.63.1...v4.64.0)
---
updated-dependencies:
- dependency-name: tqdm
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-04-04 14:12:21 +00:00 |
|
Willi Ballenthin
|
85b1d50945
|
isort
|
2022-03-31 10:40:48 -06:00 |
|
Willi Ballenthin
|
856443319c
|
viv: insn: fix OperandNumber reference
|
2022-03-31 10:39:18 -06:00 |
|
Willi Ballenthin
|
9da4ff10da
|
*: rename OperandImmediate to OperandNumber
|
2022-03-31 10:37:06 -06:00 |
|
Willi Ballenthin
|
76831e9b9d
|
changelog
|
2022-03-30 13:20:51 -06:00 |
|
Willi Ballenthin
|
997daf537e
|
viv: insn: extract OperandOffset and OperandImmediate
|
2022-03-30 13:14:08 -06:00 |
|
Willi Ballenthin
|
c7aadca25c
|
tests: demonstrate OperandOffset and OperandImmediate
|
2022-03-30 13:13:50 -06:00 |
|
Willi Ballenthin
|
6cbbd4d97f
|
rules: parse OperandOffset and OperandImmediate features
|
2022-03-30 13:13:30 -06:00 |
|
Willi Ballenthin
|
e4c5ec278d
|
features: insn: define OperandImmediate and OperandOffset
|
2022-03-30 13:13:07 -06:00 |
|
Willi Ballenthin
|
cce1e41519
|
formatting
|
2022-03-30 13:12:49 -06:00 |
|
Willi Ballenthin
|
b942050c4e
|
features: viv: factor out operand feature extraction
|
2022-03-30 09:58:08 -06:00 |
|
Willi Ballenthin
|
d8d671e36f
|
rules: add global scope features to file scope
|
2022-03-30 09:40:43 -06:00 |
|
Willi Ballenthin
|
49adb8de0c
|
pep8
|
2022-03-29 13:00:28 -06:00 |
|
Willi Ballenthin
|
fb6b60bee3
|
tests: add tests demonstrating instruction (sub)scope matching
|
2022-03-29 12:58:38 -06:00 |
|
Willi Ballenthin
|
e0fca277f2
|
rules: update valid features per scope
|
2022-03-29 12:58:27 -06:00 |
|
Willi Ballenthin
|
0effb5f8b0
|
changelog
|
2022-03-29 12:33:55 -06:00 |
|
Willi Ballenthin
|
1839746bf8
|
main: factor out matching at instruction scope
|
2022-03-29 12:29:54 -06:00 |
|
Willi Ballenthin
|
1a28c324f1
|
rules: doc
|
2022-03-29 12:26:39 -06:00 |
|
Willi Ballenthin
|
c1b28f58d0
|
rules: don't use global features to downselect rules
closes #931
|
2022-03-29 12:25:27 -06:00 |
|
Willi Ballenthin
|
565e4e0a2f
|
Merge branch 'feature-insn-scope' of github.com:mandiant/capa into feature-insn-scope
|
2022-03-29 11:52:45 -06:00 |
|
Willi Ballenthin
|
7487da89a1
|
Merge branch 'master' into feature-insn-scope
|
2022-03-29 11:51:14 -06:00 |
|
Willi Ballenthin
|
fe5d88585c
|
setup: bump black to 22.3.0 to fix CI
|
2022-03-29 11:40:34 -06:00 |
|
Willi Ballenthin
|
bd6e62e9bf
|
Update scripts/lint.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2022-03-29 11:26:21 -06:00 |
|
Willi Ballenthin
|
b76930d2a3
|
main: split out basic block feature, match extraction
|
2022-03-28 13:47:53 -06:00 |
|
Willi Ballenthin
|
00d439f681
|
main: rename find_code_capabilities
|
2022-03-28 13:29:06 -06:00 |
|
Willi Ballenthin
|
963cfbf380
|
pep8
|
2022-03-28 13:17:35 -06:00 |
|
Willi Ballenthin
|
031ea167e8
|
add pycodestyle config
|
2022-03-28 13:17:18 -06:00 |
|
Willi Ballenthin
|
dde52f2bc8
|
pep8
|
2022-03-28 13:04:44 -06:00 |
|
Willi Ballenthin
|
46cc681eba
|
tests: demonstrate instruct subscope rule extraction
|
2022-03-28 13:04:13 -06:00 |
|
Willi Ballenthin
|
b0619f4f01
|
rules: index instruction rules in ruleset
|
2022-03-28 13:03:58 -06:00 |
|
Willi Ballenthin
|
2baf05acdb
|
rules: parse instruction subscope with implied AND
|
2022-03-28 12:55:09 -06:00 |
|
Willi Ballenthin
|
890870bf45
|
rules: let subscope blocks have descriptions
|
2022-03-28 12:54:54 -06:00 |
|
Willi Ballenthin
|
9da9c3aceb
|
rules: add valid features for insn scope
|
2022-03-28 12:40:10 -06:00 |
|
Willi Ballenthin
|
c8fedb0f70
|
gitignore
|
2022-03-28 12:39:58 -06:00 |
|