Moritz
6a222a6139
Update black ( #1307 )
...
* build(deps-dev): bump black from 22.12.0 to 23.1.0
Bumps [black](https://github.com/psf/black ) from 22.12.0 to 23.1.0.
- [Release notes](https://github.com/psf/black/releases )
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md )
- [Commits](https://github.com/psf/black/compare/22.12.0...23.1.0 )
---
updated-dependencies:
- dependency-name: black
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* reformat black 23.1.0
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-07 15:50:15 +01:00
Willi Ballenthin
6ad471a914
Merge branch 'master' into rules-cache
2023-01-20 14:51:32 +01:00
Willi Ballenthin
476ffabae9
rules: cache the ruleset to disk
...
ref: #1212
2023-01-20 14:50:00 +01:00
Moritz
fa0ddba436
add format to global features and code refactors ( #1284 )
...
* refactor: get format handling
* add format to global features
2023-01-19 13:31:00 +01:00
Moritz
5fa2a87747
fix dotnet and pe format handling ( #1256 )
2023-01-04 17:46:51 +01:00
Willi Ballenthin
b819033da0
lots of mypy
2022-12-14 10:37:39 +01:00
Willi Ballenthin
9ebea05933
show-capabilities-by-function: use new ResultDocument
2022-06-20 14:32:10 -06:00
Willi Ballenthin
d7cfa4ee96
features: make features implement __lt__
2022-05-25 15:08:26 -06:00
Willi Ballenthin
a4003d7d91
tests: fix scripts using json document
2022-05-24 14:50:17 -06:00
Moritz
b5be876e61
feat: start dotnet detection ( #955 )
...
* feat: start dotnet detection
* Apply suggestions from code review
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com >
* refactor: dn instead of dotnet
* refactor: format branches, extractor reorg
* refactor: format selection and dotnet detect
* feat: get format, arch, os
* refactor: log errors and exceptions
* ci: also test and build for dotnet-main dev
* fix: import path
* fix: circular dep
* fix: remove buf argument
feat: get runtime meta data
* fix: log unsupported runtime error
* fix: type ignore
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com >
2022-04-06 11:33:14 +02:00
William Ballenthin
8903d2abcb
show-capabilities-by-function: also include matches from BBs in fn
2021-10-26 15:05:53 -06:00
William Ballenthin
328e13fbfe
main: compute function & bb layout
...
so bb can be associated with function in output.
only captures BBs that have a rule match,
otherwise, there might be too much data captured.
closes #130 .
2021-10-26 15:04:50 -06:00
Moritz Raabe
8de69c639a
s/fireeye/mandiant
2021-09-29 12:55:16 +02:00
William Ballenthin
1b9a6c3c59
main: collect os/format/arch into metadata and render it
2021-08-20 16:50:40 -06:00
Moritz Raabe
4ca9e168fe
Merge branch 'master' into fix-630
2021-06-28 11:32:27 +02:00
William Ballenthin
40c7401f0a
pep8
2021-06-15 12:28:45 -06:00
William Ballenthin
7f03db9fe4
main: dont save .viv by default, unless CAPA_SAVE_WORKSPACE set
...
closes #507
2021-06-15 12:24:01 -06:00
William Ballenthin
48858e114d
main: refactor handling of rules, signatures cli arguments
2021-06-15 11:54:57 -06:00
William Ballenthin
6f1f928434
main: when --signatures provided, override default set
...
closes #630
2021-06-15 11:43:38 -06:00
William Ballenthin
954ed3a408
pep8
2021-06-09 22:22:03 -06:00
William Ballenthin
ac59e50b5f
move capa/features/__init__.py logic to common.py
...
also cleanup imports across the board,
thanks to pylance.
2021-06-09 22:20:53 -06:00
William Ballenthin
1ee7b7b856
merge master
2021-03-05 15:23:47 -07:00
William Ballenthin
063e1229bc
pep8
2021-03-05 11:10:12 -07:00
William Ballenthin
3a1d5d068c
scripts: use common argument handler
...
closes #449
2021-03-05 10:58:40 -07:00
William Ballenthin
c2a4629c62
scripts: add cli arguments to specify signatures
2021-03-04 15:04:33 -07:00
Ana Maria Martinez Gomez
d28ba3c628
Make backend a required parameter in get_extractor
...
Make the `backend` argument required in the `get_extractor` internal
routine. Specify a backend in the scripts which call this function. Add
a CLI backend option in capa/features/freeze.py as well.
2021-02-25 10:04:19 +01:00
Michael Hunhoff
47b3ef29be
removing viv dep from show-capabilities-by-function.py
2021-02-17 14:49:52 -07:00
Moritz Raabe
34e7991081
black 20.8b1 updates
2020-08-27 11:26:28 +02:00
William Ballenthin
baeea5b6ec
*: update license header to reference Apache 2.0
...
closes #173
2020-07-22 15:05:24 -06:00
Ana María Martínez Gómez
07764fb31f
Use isort 5
...
Run `isort --profile black --length-sort --line-width 120 .`
Update documentation as well.
2020-07-16 22:02:53 +02:00
William Ballenthin
3faf175da7
*: add license header
...
closes #144
2020-07-15 14:14:53 -06:00
William Ballenthin
028b0c3734
pep8
2020-07-14 08:42:54 -06:00
Moritz Raabe
22c3475714
main: output updates
2020-07-09 22:42:34 +02:00
William Ballenthin
091f1d0c41
render: show rules path
...
closes #111
2020-07-06 17:08:55 -06:00
William Ballenthin
ecba9986fc
pep8
2020-07-06 14:07:02 -06:00
William Ballenthin
484179c042
render: move capabilities by function to its own standalone script
2020-07-06 14:06:06 -06:00