Commit Graph

3094 Commits

Author SHA1 Message Date
Capa Bot bbc0afd083 Sync capa rules submodule 2023-01-27 08:56:49 +00:00
Capa Bot 8857f92f7c Sync capa rules submodule 2023-01-26 08:15:31 +00:00
Willi Ballenthin 70f568b1cc Merge pull request #1291 from mandiant/rules-cache
cache rule set across invocations of capa
2023-01-25 17:52:34 +01:00
Capa Bot c586166006 Sync capa-testfiles submodule 2023-01-25 16:45:08 +00:00
Moritz 96f266ce5e ci: pin GitHub Actions versions (#1295) 2023-01-25 17:34:28 +01:00
Willi Ballenthin e5549d6ce8 Update capa/ida/plugin/form.py 2023-01-25 16:47:01 +01:00
Capa Bot b60717bb8c Sync capa rules submodule 2023-01-24 14:35:01 +00:00
Willi Ballenthin 83eefd343c Update scripts/capa2yara.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
2023-01-24 15:33:37 +01:00
Moritz 03e8be6368 Create scorecard.yml (#1294) 2023-01-24 14:15:53 +01:00
Capa Bot a58e9e4df3 Sync capa rules submodule 2023-01-23 13:53:42 +00:00
Moritz 0a78187c69 optimize tests to speed them up (#1287)
* optimize tests to speed them up

Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
2023-01-23 11:25:04 +01:00
Willi Ballenthin 61112c2527 lint: fix pbar counts 2023-01-21 20:16:49 +01:00
Willi Ballenthin 67cfefd2df main: get_rules: remove progress bar 2023-01-21 19:38:23 +01:00
Willi Ballenthin 3dfd16c033 main: fix ValueError 2023-01-21 19:30:15 +01:00
Willi Ballenthin 67b9d2e1c0 black 2023-01-21 19:28:15 +01:00
Willi Ballenthin a076a0c44e main: further document get_rules 2023-01-21 19:24:20 +01:00
Willi Ballenthin f152729c79 explorer: use main.get_rules and simplify cache 2023-01-21 19:10:50 +01:00
Willi Ballenthin 3c0e36d5d4 ruleset: record number of source rules loaded 2023-01-21 19:10:35 +01:00
Willi Ballenthin 887f37b72c main: get_rules: accept callback to update status 2023-01-21 19:10:02 +01:00
Willi Ballenthin e30dd08dec cache: add doc 2023-01-21 18:20:14 +01:00
Willi Ballenthin 2d1bbeda0c Merge branch 'rules-cache' of personal.github.com:mandiant/capa into rules-cache 2023-01-21 18:14:42 +01:00
Willi Ballenthin 68603a9cc7 Update scripts/cache-ruleset.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
2023-01-23 12:13:07 +01:00
Willi Ballenthin 6c83db9977 Update scripts/cache-ruleset.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
2023-01-23 12:12:57 +01:00
Willi Ballenthin 6d16cafbc8 cache: handle invalid caches 2023-01-21 18:14:12 +01:00
Willi Ballenthin e503cedd8f main: pbar: realize the list so it has a length 2023-01-21 17:31:57 +01:00
Willi Ballenthin 1a498d1afc main: fix reference error 2023-01-20 16:21:44 +01:00
Willi Ballenthin 33a46cc633 ci: cache the ruleset 2023-01-20 16:19:46 +01:00
Willi Ballenthin b3b9ec11dd pyinstaller: package up the cache directory, too 2023-01-20 16:11:00 +01:00
Willi Ballenthin a7afdec2e1 cache: accept cache_dir parameter 2023-01-20 16:10:41 +01:00
Willi Ballenthin 56a0bedac9 scripts: add tool to cache a ruleset to a directory 2023-01-20 15:50:17 +01:00
Willi Ballenthin f451fe68e1 pep8/mypy 2023-01-20 15:42:22 +01:00
Willi Ballenthin 946816e377 cache: improve variable name 2023-01-20 15:26:17 +01:00
Willi Ballenthin 99af09fce5 main: revert wording change, which was just churn 2023-01-20 15:24:34 +01:00
Willi Ballenthin 0888e5ad69 main: more doc 2023-01-20 15:22:43 +01:00
Willi Ballenthin c423ccec67 add tests for ruleset caching 2023-01-20 15:20:26 +01:00
Willi Ballenthin 03f72f498e cache: use zlib to reduce cache size 2023-01-20 15:20:10 +01:00
Willi Ballenthin fbd7c566f4 cache: add more helpers
to enable better testing
2023-01-20 15:19:48 +01:00
Willi Ballenthin e09d35bbb9 main: fix rule content decoding 2023-01-20 15:01:05 +01:00
Willi Ballenthin e644775ad1 changelog 2023-01-20 14:52:47 +01:00
Willi Ballenthin 6ad471a914 Merge branch 'master' into rules-cache 2023-01-20 14:51:32 +01:00
Willi Ballenthin 476ffabae9 rules: cache the ruleset to disk
ref: #1212
2023-01-20 14:50:00 +01:00
Willi Ballenthin 4b7a9e149f rules: move to directory structure 2023-01-20 13:27:30 +01:00
Capa Bot 49c18bd83d Sync capa rules submodule 2023-01-20 12:15:23 +00:00
Capa Bot 67717761bd Sync capa rules submodule 2023-01-20 12:15:02 +00:00
Capa Bot b10196cdac Sync capa rules submodule 2023-01-20 11:12:04 +00:00
Moritz fa0ddba436 add format to global features and code refactors (#1284)
* refactor: get format handling

* add format to global features
2023-01-19 13:31:00 +01:00
Capa Bot 0fb3be359f Sync capa rules submodule 2023-01-19 12:12:41 +00:00
Capa Bot 26662e99de Sync capa rules submodule 2023-01-19 12:11:19 +00:00
Willi Ballenthin 5513d4ca43 viv: insn: string: handle viv bug around substrings (#1273)
* viv: insn: string: handle viv bug around substrings

closes #1271

* use minimum string length 4

* update overlapping string test and fixup vivisect elf analysis missing function

Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
2023-01-19 13:02:53 +01:00
Capa Bot 2b07ec925c Sync capa rules submodule 2023-01-19 11:23:42 +00:00