Moritz Raabe
998f4a6bad
auto detect shellcode file extensions
2021-04-08 18:49:22 +02:00
Ana Maria Martinez Gomez
c0d6468347
py3: Remove Python 2 tests
...
Tests don't need to support Python 2 any longer. Do not run tests with
Python 2.
2021-04-07 18:20:07 +02:00
Ana Maria Martinez Gomez
c522f5094a
Use -j option in test_backend_option
...
Use `-j` option in `test_backend_option` to check the extractor and that
rules have been extracted. This way we don't need to check if a concrete
rule matches, but only that at least a rule matches.
2021-03-03 18:33:20 +01:00
Ana Maria Martinez Gomez
29b6772721
Test backend option
...
As `get_extractor` returns only vivisect now, `test_main` is not run for
smda. Test that capa works with all backends. It doesn't test that the
backend is actually called.
2021-03-03 17:36:51 +01:00
Daniel Plohmann (jupiter)
36822926af
initial commit for backend-smda
2020-10-29 11:28:22 +01:00
Moritz Raabe
679316946e
addressing Willi's feedback
2020-10-22 20:10:47 +02:00
Moritz Raabe
fbe104d254
get decoded sample path
...
closes #328
2020-10-22 19:56:41 +02:00
William Ballenthin
a25a86e2d6
render: dont display rules that are also matched as subrule matches
...
closes #224
2020-09-02 10:20:54 -06:00
William Ballenthin
322d2ad549
tests: main: add tests for #262
2020-08-31 15:51:49 -06:00
Moritz Raabe
34e7991081
black 20.8b1 updates
2020-08-27 11:26:28 +02:00
William Ballenthin
b084f7cb9b
pep8
2020-08-16 05:18:39 -06:00
William Ballenthin
89edaf4c5c
tests: xfail things that won't work on py3
2020-08-16 05:17:17 -06:00
William Ballenthin
1873d0b7c5
*: py3 compat
2020-08-16 05:03:08 -06:00
William Ballenthin
b784f086b4
tests: make fixtures more consistent in prep for other backends
2020-08-14 12:04:53 -06:00
Ana María Martínez Gómez
adaac03d1d
extractor: remove characteristic(switch)
...
Get rid of the `characteristic(switch)` feature as any of our rules use
it and its analysis is not very easy. Analysis results most likely
differ across backends, leading to inconsistency.
2020-08-13 16:47:01 +02:00
William Ballenthin
baeea5b6ec
*: update license header to reference Apache 2.0
...
closes #173
2020-07-22 15:05:24 -06:00
Ana María Martínez Gómez
07764fb31f
Use isort 5
...
Run `isort --profile black --length-sort --line-width 120 .`
Update documentation as well.
2020-07-16 22:02:53 +02:00
William Ballenthin
3faf175da7
*: add license header
...
closes #144
2020-07-15 14:14:53 -06:00
William Ballenthin
867de57062
main: find_capabilities: extract feature counts per item, too
...
closes #95
closes #96
2020-07-03 10:12:03 -06:00
William Ballenthin
a50bd4c394
pep8
2020-07-02 15:51:08 -06:00
William Ballenthin
9ad52da6d0
add test for #78
2020-07-02 15:50:56 -06:00
William Ballenthin
8f7cb6dad0
pep8
2020-07-02 11:01:18 -06:00
William Ballenthin
41c32013bb
Merge branch 'master' into fmt-black
2020-07-02 11:00:14 -06:00
William Ballenthin
1188103d1c
pep8: isort
2020-07-02 10:52:05 -06:00
Moritz Raabe
c37365f045
fix render, cleanup feature string display
2020-07-02 18:48:14 +02:00
William Ballenthin
c185e9ef09
pep8: black
2020-07-02 10:32:26 -06:00
William Ballenthin
db2b1caeae
Merge branch 'master' into fmt-black
2020-07-02 10:25:24 -06:00
Ana María Martínez Gómez
64124c0b64
Remove True from Characteristic rules and output
...
Get rid of `True` in characteristic (rules, output and json) as it is
implicit. This way, the same syntax is used for characteristic as for
the rest of the features.
Co-authored-by: William Ballenthin <william.ballenthin@fireeye.com >
2020-07-02 16:50:15 +02:00
William Ballenthin
d23ef48bb6
pep8
2020-07-01 12:33:13 -06:00
Moritz Raabe
beba3fb3c7
double to single quotes
2020-06-24 15:00:35 +02:00
William Ballenthin
add3537447
import source files, forgetting about 938 prior commits
2020-06-18 09:13:19 -06:00
