Commit Graph

117 Commits

Author SHA1 Message Date
Moritz Raabe 8ac49748f5 Merge branch 'master' into enhancements/ida-plugin 2020-09-02 14:35:15 +02:00
Moritz Raabe 98ed862d3c add form icon and other cosmetic changes 2020-09-02 14:18:49 +02:00
William Ballenthin 330c0f055e Merge branch 'master' into fix-246 2020-08-31 22:30:39 -06:00
William Ballenthin 5f7f718fe4 tests: add test for #276 2020-08-31 20:31:36 -06:00
Capa Bot 08099f93a1 Sync capa-testfiles submodule 2020-09-01 16:56:04 +00:00
Willi Ballenthin cbabf5650d Merge pull request #273 from fireeye/fix-263
fix 263
2020-09-01 10:50:41 -06:00
William Ballenthin 090ec46ca4 features: extract import A/W variants and their base names
closes #246
2020-08-31 17:13:10 -06:00
William Ballenthin 5b349c1df8 tests: add feature tests for #246 2020-08-31 16:59:55 -06:00
William Ballenthin 7e0ebb8c5b rules: fmt: fix formatting of description block
closes #263
2020-08-31 16:49:54 -06:00
William Ballenthin 0734edf6f0 tests: fmt: add test for #263 2020-08-31 16:34:10 -06:00
William Ballenthin 322d2ad549 tests: main: add tests for #262 2020-08-31 15:51:49 -06:00
William Ballenthin fb4ef6b993 tests: add tests for #262 2020-08-31 15:38:07 -06:00
Capa Bot 846b40de9f Sync capa-testfiles submodule 2020-08-31 20:59:52 +00:00
Capa Bot 0f44ec0dd8 Sync capa-testfiles submodule 2020-08-28 19:59:22 +00:00
Moritz Raabe 34e7991081 black 20.8b1 updates 2020-08-27 11:26:28 +02:00
Capa Bot cb9bd2eab7 Sync capa-testfiles submodule 2020-08-27 08:40:12 +00:00
Michael Hunhoff dc8870861b fixes 249 2020-08-26 16:31:07 -06:00
Capa Bot 739100d481 Sync capa-testfiles submodule 2020-08-25 16:34:26 +00:00
Willi Ballenthin 585a9c167f Merge pull request #243 from fireeye/fix-241
fix 241: string counting exception
2020-08-18 12:09:52 -06:00
Willi Ballenthin 385c956184 fixtures: fix doc 2020-08-17 20:53:34 -06:00
William Ballenthin d3dad3a66a rules: fix bug in string counting
closes #241
2020-08-16 21:38:13 -06:00
William Ballenthin b084f7cb9b pep8 2020-08-16 05:18:39 -06:00
William Ballenthin 89edaf4c5c tests: xfail things that won't work on py3 2020-08-16 05:17:17 -06:00
William Ballenthin 295d3fee5d tests: limit tests to py2/py3 2020-08-16 05:03:57 -06:00
William Ballenthin 0af6386693 tests: fixtures: add ctxmgr for catching xfail 2020-08-16 05:03:23 -06:00
William Ballenthin 1873d0b7c5 *: py3 compat 2020-08-16 05:03:08 -06:00
William Ballenthin c032d556fb tests: freeze: make py3 compatible 2020-08-16 05:02:35 -06:00
William Ballenthin d7f1c23f4d tests: show found number of features when unexpected 2020-08-16 05:01:20 -06:00
William Ballenthin c1b7176e36 submodule: testfiles update 2020-08-14 13:34:43 -06:00
William Ballenthin 259a0a2007 tests: ida: remove old print 2020-08-14 13:15:22 -06:00
William Ballenthin eee565b596 tests: ida: tweak tests to fit IDA behavior 2020-08-14 13:10:38 -06:00
William Ballenthin 26061c25a5 tests: fixtures: add mapping from test data to md5 2020-08-14 12:58:08 -06:00
William Ballenthin 897da4237d tests: fixtures: remove lru_cache on some accessors 2020-08-14 12:48:19 -06:00
William Ballenthin 1923d479d8 tests: fixtures: fix name error 2020-08-14 12:35:30 -06:00
William Ballenthin 6b8bce4f42 tests: fixtures: factor out resolution of scope/sample 2020-08-14 12:34:00 -06:00
William Ballenthin 107a68628b tests: ida: attempt to use new framework (wip) 2020-08-14 12:22:59 -06:00
William Ballenthin 26c9811ba1 tests: viv: fix typo preventing some tests from running 2020-08-14 12:22:39 -06:00
William Ballenthin b784f086b4 tests: make fixtures more consistent in prep for other backends 2020-08-14 12:04:53 -06:00
William Ballenthin 8cbe3f8546 tests: move expected features into fixtures for reuse
closes #225
2020-08-14 11:25:00 -06:00
Ana María Martínez Gómez adaac03d1d extractor: remove characteristic(switch)
Get rid of the `characteristic(switch)` feature as any of our rules use
it and its analysis is not very easy. Analysis results most likely
differ across backends, leading to inconsistency.
2020-08-13 16:47:01 +02:00
Capa Bot e64277ed41 Sync capa-testfiles submodule 2020-08-12 23:26:45 +00:00
Willi Ballenthin 744b4915c9 Merge pull request #226 from fireeye/enhancement-223
IDA: resolve nested data references to strings/bytes
2020-08-12 09:05:11 -06:00
Capa Bot 15607d63ab Sync capa-testfiles submodule 2020-08-11 21:03:00 +00:00
Michael Hunhoff 70b4546c33 adding test for unmapped immediate data reference 2020-08-11 14:13:43 -06:00
Michael Hunhoff 791afd7ac8 adding code to emit number feature for unmapped immediate data reference 2020-08-11 14:12:41 -06:00
Michael Hunhoff 79d94144c6 adding IDA extractor code to resolve nested data references for string and bytes features 2020-08-11 08:44:44 -06:00
Capa Bot 7d62156a29 Sync capa-testfiles submodule 2020-08-11 07:12:56 +00:00
Capa Bot 23d31c3c2c Sync capa-testfiles submodule 2020-08-05 18:50:52 +00:00
William Ballenthin 4bb13d6075 tests: ida: fix offset arch test 2020-08-04 10:35:10 -06:00
William Ballenthin e74b80a318 extractors: ida: add helper method get_function 2020-08-04 10:32:24 -06:00