gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2026-06-30 18:16:48 -07:00
Code Issues Packages Projects Releases Wiki Activity
3,050 Commits 55 Branches 49 Tags
b10196cdac6b4794de221b46fe2336098c3cf5cd
Commit Graph

3050 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
William Ballenthin 89603586da elf: add some doc 2021-08-18 14:23:48 -06:00
William Ballenthin a35f5a1650 elf: detect FreeBSD via note 2021-08-18 14:21:50 -06:00
William Ballenthin f1df29d27e tests: xfail smda ELF API 
waiting for #725
 2021-08-18 14:08:36 -06:00
Willi Ballenthin 08c24e2705 Merge pull request #729 from doomedraven/patch-1 
update capa_as_library for capa v2
 2021-08-18 08:32:41 -06:00
doomedraven b1171864e3 black 2021-08-18 14:25:58 +02:00
doomedraven 5af59cecda update capa_as_library for capa v2 2021-08-18 14:23:36 +02:00
William Ballenthin 0c3a38b24b Merge branch 'feature-701' of github.com:fireeye/capa into feature-701 2021-08-17 09:07:25 -06:00
William Ballenthin ac5d163aa0 pep8 2021-08-17 09:07:08 -06:00
Willi Ballenthin dfe2dbea6d Merge pull request #722 from fireeye/fix-703 
fix reporting of namespace matches
 2021-08-17 09:05:19 -06:00
Willi Ballenthin 909ffc187b Merge branch 'master' into feature-701 2021-08-17 09:00:48 -06:00
William Ballenthin 92dfa99059 extractors: log unsupported os/arch/format but don't except 2021-08-17 08:57:42 -06:00
William Ballenthin 0065876702 extractors: ida: move os extraction to global module 2021-08-17 08:57:27 -06:00
Capa Bot 23bf28702f Sync capa rules submodule 2021-08-17 14:23:23 +00:00
Capa Bot 066873bd06 Sync capa rules submodule 2021-08-17 14:20:34 +00:00
William Ballenthin 98c00bd8b1 extractors: add missing global_.py files 2021-08-16 17:12:45 -06:00
William Ballenthin fd47b03fac render: vverbose: don't render locations of global scope features 2021-08-16 17:12:28 -06:00
William Ballenthin 8e689c39f4 features: add Arch feature at global scope 2021-08-16 17:06:56 -06:00
William Ballenthin 738fa9150e fixtures: update tests to account for Format scope 2021-08-16 16:39:40 -06:00
William Ballenthin 5405e182c3 features: move Format features to file scope 2021-08-16 16:37:04 -06:00
William Ballenthin ab1326f858 features: move OS and Format to their own features, not characteristics 2021-08-16 16:28:26 -06:00
William Ballenthin f013815b2a features: rename legacy term arch to bitness 
makes space for upcoming feature `arch: ` for things like i386/amd64/aarch64
 2021-08-16 12:21:25 -06:00
Willi Ballenthin 5b24fc2543 Merge pull request #727 from fireeye/dependabot/pip/tqdm-4.62.1 
build(deps): bump tqdm from 4.62.0 to 4.62.1
 2021-08-16 08:22:44 -06:00
dependabot[bot] b103e40ba8 build(deps): bump tqdm from 4.62.0 to 4.62.1 
Bumps [tqdm](https://github.com/tqdm/tqdm) from 4.62.0 to 4.62.1.
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](https://github.com/tqdm/tqdm/compare/v4.62.0...v4.62.1)

---
updated-dependencies:
- dependency-name: tqdm
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-08-16 14:02:16 +00:00
William Ballenthin d5c9a5cf3c mypy: ignore ida_loader 2021-08-11 15:15:33 -06:00
William Ballenthin 30d7425b98 changelog 2021-08-11 15:10:07 -06:00
William Ballenthin 34819b289d pep8 2021-08-11 15:08:31 -06:00
William Ballenthin 71d9ebd859 extractors: ida: extract OS and file format characteristics at all scopes 2021-08-11 15:05:57 -06:00
William Ballenthin c1910d47f0 move is_global_feature into capa.features.common 2021-08-11 15:02:10 -06:00
William Ballenthin 769d354792 detect-elf-os: remove extra print statement 2021-08-11 14:56:01 -06:00
William Ballenthin a7678e779e extractors: smda: extract format and OS characteristics at all scopes 2021-08-11 14:52:36 -06:00
William Ballenthin 294f74b209 extractors: viv: extract format and OS at all scopes 2021-08-11 14:44:41 -06:00
William Ballenthin fa8b4a4203 extractors: add common routine to extract OS from ELF 2021-08-11 14:43:13 -06:00
William Ballenthin 7205862dbf helpers: move ELF and IDA helpers out of script and into common module 2021-08-11 14:42:29 -06:00
William Ballenthin 37bc47c772 extractors: viv: extract from bytes not file path 2021-08-11 14:41:11 -06:00
William Ballenthin baaa8ba2c1 scripts: add script to detect ELF OS 
closes #724
 2021-08-11 13:52:50 -06:00
William Ballenthin 05f8e2445a fixtures: add tests demonstrating extraction of features from ELF files 2021-08-11 09:29:05 -06:00
William Ballenthin 753b003107 pep8 2021-08-11 09:23:41 -06:00
William Ballenthin 97092c91db tests: assert absence of the wrong os/format 2021-08-11 09:13:56 -06:00
William Ballenthin 20859d2796 extractors: pefile: extract OS and format 2021-08-11 09:11:29 -06:00
William Ballenthin 06f8943bc4 features: add format/pe and format/elf characteristics 2021-08-11 09:10:04 -06:00
William Ballenthin e797a67e97 features: define CHARACTERISTIC_OS constants for ease of use 2021-08-11 09:08:37 -06:00
William Ballenthin a1eca58d7a features: support characteristic(os/*) features 2021-08-11 08:40:40 -06:00
William Ballenthin aefe97e09e rules: fix typos 2021-08-11 08:39:56 -06:00
Willi Ballenthin 59ae901f57 changelog 2021-08-11 08:21:38 -06:00
Capa Bot 811f484d3b Sync capa-testfiles submodule 2021-08-11 14:18:28 +00:00
Willi Ballenthin ff08b99190 Merge pull request #700 from Adir-Shemesh/elf 
Add initial elf files support
 2021-08-11 08:18:02 -06:00
William Ballenthin 44dc4efe57 changlog 2021-08-10 13:14:00 -06:00
William Ballenthin f7e2ac83f2 Merge branch 'master' of github.com:fireeye/capa into fix-703 2021-08-10 13:12:25 -06:00
William Ballenthin 7e60162d65 result_document: extract only the relevant namespace locations 
closes #703
 2021-08-10 13:06:04 -06:00
William Ballenthin cd06ee4544 main: correctly extract namespaces matches across scopes 
closes #721
 2021-08-10 13:05:31 -06:00