Commit Graph

1514 Commits

Author SHA1 Message Date
Willi Ballenthin
bd63ded1dd file scope API features (#568)
* smda: minor unrelated fixes

* file features: extract API features at file scope for library functions

closes #567

* changelog

* ida: add file-scope API feature

Co-authored-by: mike-hunhoff <mike.hunhoff@gmail.com>

* fix lints from pylance

* features: use "function-name" for recognized linked functions

* pep8

* pep8

* rules: remove incorrect feature scope

* tests: xfail SMDA tests relying on function id

* tests: fixtures: order tests by sample, ideally improving memory usage

* pep8

* pep8

* smda: xfail two more tests

Co-authored-by: mike-hunhoff <mike.hunhoff@gmail.com>
2021-05-27 12:59:00 -06:00
Capa Bot
7df29b491c Sync capa-testfiles submodule 2021-05-27 07:08:00 +00:00
Capa Bot
f0fb5fb346 Sync capa rules submodule 2021-05-26 21:03:50 +00:00
Capa Bot
342497b72f Sync capa rules submodule 2021-05-26 07:31:49 +00:00
Capa Bot
2b19257c5c Sync capa-testfiles submodule 2021-05-26 07:22:40 +00:00
Moritz
4ebbdcd00c Merge pull request #582 from fireeye/ci/lint-color-optional
or/optional lint and colors
2021-05-25 17:26:23 +02:00
Moritz Raabe
204d8b36df add or/optional lint and colors
closes #348
2021-05-25 16:32:47 +02:00
Moritz Raabe
8e4e9fc616 Revert "Sync capa-testfiles submodule"
This reverts commit 826d472c07.
2021-05-25 14:58:01 +02:00
Capa Bot
826d472c07 Sync capa-testfiles submodule 2021-05-25 12:45:59 +00:00
Capa Bot
57f416d62d Sync capa-testfiles submodule 2021-05-25 12:44:13 +00:00
Capa Bot
a79a547682 Sync capa rules submodule 2021-05-24 15:25:44 +00:00
Capa Bot
bd9812cee4 Sync capa rules submodule 2021-05-24 15:22:21 +00:00
Willi Ballenthin
2a36894d85 Merge pull request #578 from fireeye/dependabot/pip/viv-utils-flirt--0.6.4
build(deps): bump viv-utils[flirt] from 0.6.2 to 0.6.4
2021-05-24 09:14:31 -06:00
Willi Ballenthin
c33c4c45dc Merge pull request #577 from fireeye/dependabot/pip/smda-1.5.17
build(deps): bump smda from 1.5.14 to 1.5.17
2021-05-24 09:14:22 -06:00
dependabot[bot]
9cd07a0cee build(deps): bump viv-utils[flirt] from 0.6.2 to 0.6.4
Bumps [viv-utils[flirt]](https://github.com/williballenthin/viv-utils) from 0.6.2 to 0.6.4.
- [Release notes](https://github.com/williballenthin/viv-utils/releases)
- [Commits](https://github.com/williballenthin/viv-utils/compare/v0.6.2...v0.6.4)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-24 06:03:22 +00:00
dependabot[bot]
4f85d85ea6 build(deps): bump smda from 1.5.14 to 1.5.17
Bumps [smda](https://github.com/danielplohmann/smda) from 1.5.14 to 1.5.17.
- [Release notes](https://github.com/danielplohmann/smda/releases)
- [Commits](https://github.com/danielplohmann/smda/commits)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-24 06:03:15 +00:00
Willi Ballenthin
8699003597 Merge pull request #572 from fireeye/feature-571
linter: summarize status at end
2021-05-21 11:14:29 -06:00
Willi Ballenthin
4cada67b21 Merge branch 'master' into feature-571 2021-05-21 11:14:22 -06:00
Willi Ballenthin
0a203b54cd changelog 2021-05-21 11:13:48 -06:00
Willi Ballenthin
cf1e9dc425 Merge pull request #573 from fireeye/lazy-import-flirt
lazy import flirt
2021-05-21 09:50:14 -06:00
Willi Ballenthin
6b8bb0520d Merge pull request #575 from ruppde/master
Update capa2yara.py
2021-05-21 09:45:24 -06:00
Arnim Rupp
7759d2dd79 Update capa2yara.py 2021-05-21 17:04:16 +02:00
Arnim Rupp
73f121cf03 Update capa2yara.py
bugfix: https://github.com/fireeye/capa-rules/blob/master/collection/get-geographical-location.yml hit an far too many files with /\bcity opposed to the intention of the capa rule ti just hit in function names. changed to /\x00city.
2021-05-21 16:51:14 +02:00
Moritz
91f914f5c0 Merge pull request #562 from fireeye/lib-meta-info
improve progress bar output
2021-05-21 16:47:52 +02:00
Moritz Raabe
af5613250f lazy import flirt
closes #540
2021-05-21 11:31:37 +02:00
Capa Bot
72da8f3aed Sync capa rules submodule 2021-05-21 07:12:57 +00:00
Moritz Raabe
a8e353fe31 revert rule loading pbar 2021-05-20 14:00:01 +02:00
Moritz Raabe
8a386b6909 improve progress bar output 2021-05-20 13:56:29 +02:00
Ana Maria Martinez Gomez
83606bbc0f changelog: convert capa rules to YARA rules
Add https://github.com/fireeye/capa/pull/561 to CHANGELOG.
2021-05-20 11:25:24 +02:00
Moritz
caaeded278 Merge pull request #563 from fireeye/ci/lint-statement-children
lint statements for single child statements
2021-05-20 10:41:41 +02:00
Willi Ballenthin
dcf4a056ee show-features: skip library functions (#570)
* show-features: skip library functions

closes #569

* changelog
2021-05-20 10:34:48 +02:00
Capa Bot
f9cec64c2d Sync capa-testfiles submodule 2021-05-20 08:11:28 +00:00
William Ballenthin
9b1400c23a pep8 2021-05-19 16:14:37 -06:00
William Ballenthin
60d77759f2 Merge branch 'feature-571' of github.com:fireeye/capa into feature-571 2021-05-19 16:14:09 -06:00
Willi Ballenthin
5fc705856d Merge branch 'master' into feature-571 2021-05-20 16:40:37 -06:00
William Ballenthin
0a1adb99e0 lint: cleanup handling of nursery rules further 2021-05-19 16:13:45 -06:00
William Ballenthin
3eef034a94 lint: better handling of nursery rule summary 2021-05-19 16:06:07 -06:00
Capa Bot
66d96201cb Sync capa rules submodule 2021-05-19 20:31:48 +00:00
Moritz Raabe
586726fb13 lint statements for single child statements 2021-05-19 18:25:14 +02:00
Capa Bot
656cdfc41c Sync capa rules submodule 2021-05-19 16:21:47 +00:00
Arnim Rupp
7b62b589f7 Create capa2yara.py (#561)
* Create capa2yara.py

* Update capa2yara.py

    isort --profile black --length-sort --line-width 120

    black -l 120

* Update scripts/capa2yara.py

Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>

Co-authored-by: Arnim Rupp <46819580+2d4d@users.noreply.github.com>
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
2021-05-19 18:01:04 +02:00
Capa Bot
e7884c9a53 Sync capa rules submodule 2021-05-19 07:50:11 +00:00
William Ballenthin
2f2849dee0 changelog 2021-05-18 15:20:54 -06:00
William Ballenthin
ff88393248 linter: summarize status at end
closes #571
2021-05-18 15:19:34 -06:00
William Ballenthin
9ed6e12e7c Merge branch 'master' of github.com:fireeye/capa 2021-05-18 13:35:59 -06:00
William Ballenthin
ec5cec619d rules: add tests demonstrating mnemonic descriptions 2021-05-18 13:35:24 -06:00
Capa Bot
760867b81e Sync capa rules submodule 2021-05-17 15:00:45 +00:00
Capa Bot
abeaac0675 Sync capa rules submodule 2021-05-17 10:14:49 +00:00
Moritz
010866a3bd Merge pull request #560 from fireeye/dependabot/pip/pytest-cov-2.12.0
build(deps-dev): bump pytest-cov from 2.11.1 to 2.12.0
2021-05-17 12:14:16 +02:00
Capa Bot
8f9f792930 Sync capa rules submodule 2021-05-17 08:36:26 +00:00