Moritz
|
c9df78252a
|
Ignore DLL names for API features (#1824)
* ignore DLL name for api features
* keep DLL name for import features
* fix tests
|
2023-10-20 13:39:15 +02:00 |
|
Willi Ballenthin
|
62d4b008c5
|
Merge pull request #1822 from mandiant/fix/dynamic-freeze
update freeze for dynamic
|
2023-10-20 13:16:48 +02:00 |
|
Willi Ballenthin
|
fc4618e234
|
Merge branch 'dynamic-feature-extraction' into fix/dynamic-freeze
|
2023-10-20 09:16:07 +02:00 |
|
Willi Ballenthin
|
1143f2ba56
|
changelog
|
2023-10-20 07:11:42 +00:00 |
|
Willi Ballenthin
|
10dc4b92b1
|
freeze: update freeze format v3
|
2023-10-20 06:59:53 +00:00 |
|
Willi Ballenthin
|
bfecf414fb
|
freeze: add dynamic tests
|
2023-10-20 06:59:34 +00:00 |
|
Willi Ballenthin
|
0231ceef87
|
null extractor: fix typings
|
2023-10-20 06:59:16 +00:00 |
|
Moritz
|
b8b55f4e19
|
identify potential JSON object data start (#1819)
* identify potential JSON object data start
|
2023-10-19 17:17:57 +02:00 |
|
Willi Ballenthin
|
d42829d7e7
|
Merge pull request #1765 from mandiant/fix/dynamic-proto
protobuf: add dynamic support
|
2023-10-19 13:37:45 +02:00 |
|
Willi Ballenthin
|
c724a4b311
|
ci: only run BN and Ghidra tests after others complete
these are much less likely to fail because they're
changed less often, so don't run them until we know
other tests also pass.
|
2023-10-19 11:35:42 +00:00 |
|
Willi Ballenthin
|
84e22b187d
|
doc
|
2023-10-19 11:29:30 +00:00 |
|
Willi Ballenthin
|
b6a0d6e1f3
|
pre-commit: fix stages
|
2023-10-19 11:26:22 +00:00 |
|
Willi Ballenthin
|
1cb3ca61cd
|
pre-commit: only run fast checks during commit
|
2023-10-19 10:35:57 +00:00 |
|
Willi Ballenthin
|
288313a300
|
changelog
|
2023-10-19 10:28:37 +00:00 |
|
Willi Ballenthin
|
2cc6a37713
|
ci: run fast tests before the full suite
|
2023-10-19 10:23:03 +00:00 |
|
Willi Ballenthin
|
fbeb33a91f
|
Merge branch 'dynamic-feature-extraction' into fix/dynamic-proto
|
2023-10-19 10:05:26 +00:00 |
|
Willi Ballenthin
|
3519125e03
|
tests: fix COM tests with dynamic scope
|
2023-10-19 10:04:26 +00:00 |
|
Willi Ballenthin
|
98360328f9
|
proto: fix serialization of call address
|
2023-10-19 09:59:18 +00:00 |
|
Willi Ballenthin
|
3d4facd9a3
|
Merge branch 'dynamic-feature-extraction' into fix/dynamic-proto
|
2023-10-19 09:24:37 +00:00 |
|
Willi Ballenthin
|
8b0ba1e656
|
tests: rename freeze tests
|
2023-10-19 09:24:18 +00:00 |
|
Willi Ballenthin
|
7bc3fba7b0
|
Merge branch 'dynamic-feature-extraction' into fix/dynamic-proto
|
2023-10-19 09:20:15 +00:00 |
|
Willi Ballenthin
|
d5e187bc70
|
Merge branch 'master' into dynamic-feature-extraction
|
2023-10-19 09:15:57 +00:00 |
|
Moritz
|
8687c740d5
|
Merge pull request #1817 from mandiant/improve-vv-render
improve vverbose rendering
|
2023-10-19 09:41:31 +02:00 |
|
Yacine
|
9609d63f8a
|
Update tests/test_main.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2023-10-19 08:10:29 +02:00 |
|
Capa Bot
|
772f806eb6
|
Sync capa rules submodule
|
2023-10-18 15:01:37 +00:00 |
|
Willi Ballenthin
|
5eaba611d1
|
Merge pull request #1738 from Aayush-Goel-04/Aayush-Goel-04/Issue#322
add com class/interface features
|
2023-10-18 17:00:39 +02:00 |
|
mr-tz
|
b6f13f3489
|
improve vverbose rendering
|
2023-10-18 13:37:56 +02:00 |
|
Aayush Goel
|
178cfce456
|
Merge branch 'Aayush-Goel-04/Issue#322' of https://github.com/Aayush-Goel-04/capa into Aayush-Goel-04/Issue#322
|
2023-10-18 16:33:37 +05:30 |
|
Aayush Goel
|
94cf53a1e3
|
Update __init__.py
|
2023-10-18 16:33:31 +05:30 |
|
Moritz
|
2cfd45022a
|
improve and fix various dynamic parts (#1809)
* improve and fix various dynamic parts
|
2023-10-18 10:59:41 +02:00 |
|
Aayush Goel
|
26a2d1b4d1
|
Merge branch 'mandiant:master' into Aayush-Goel-04/Issue#322
|
2023-10-17 21:09:07 +05:30 |
|
Aayush Goel
|
6dbd3768ce
|
Update __init__.py
|
2023-10-17 21:04:21 +05:30 |
|
Willi Ballenthin
|
21f9e0736d
|
isort
|
2023-10-17 15:07:34 +00:00 |
|
Aayush Goel
|
7cd5aa1c40
|
Added Enum for comType
|
2023-10-17 20:28:49 +05:30 |
|
Willi Ballenthin
|
55e4fddc51
|
mypy
|
2023-10-17 14:46:33 +00:00 |
|
Willi Ballenthin
|
1aac4a1a69
|
mypy
|
2023-10-17 14:42:58 +00:00 |
|
Willi Ballenthin
|
92daf3a530
|
elffile: fix property access
|
2023-10-17 14:28:52 +00:00 |
|
Willi Ballenthin
|
547502051f
|
dynamic: fix tests
|
2023-10-17 14:27:36 +00:00 |
|
Aayush Goel
|
884b714be2
|
loading com db only once
avoid loading db multiple times by caching it.
|
2023-10-17 19:48:06 +05:30 |
|
Willi Ballenthin
|
7205bc26ef
|
submodule: rules: update
|
2023-10-17 12:28:45 +00:00 |
|
Willi Ballenthin
|
e1b3a3f6b4
|
rules: fix rendering of yaml
|
2023-10-17 12:22:32 +00:00 |
|
Willi Ballenthin
|
cb5fa36fc8
|
flake8
|
2023-10-17 11:44:48 +00:00 |
|
Willi Ballenthin
|
8ee97acf2a
|
dynamic: fix some tests
|
2023-10-17 11:43:09 +00:00 |
|
Willi Ballenthin
|
44d05f9498
|
dynamic: fix some tests
|
2023-10-17 11:41:40 +00:00 |
|
Willi Ballenthin
|
bf233c1c7a
|
integrate Ghidra backend with dynamic analysis
|
2023-10-17 10:56:35 +00:00 |
|
Willi Ballenthin
|
182a9868ca
|
merge master
|
2023-10-17 10:32:25 +00:00 |
|
Willi Ballenthin
|
40d9587fa4
|
Merge pull request #1808 from mandiant/dependabot/pip/ruamel-yaml-0.17.35
build(deps-dev): bump ruamel-yaml from 0.17.32 to 0.17.35
|
2023-10-17 09:59:41 +02:00 |
|
Willi Ballenthin
|
430fdb074b
|
Merge pull request #1807 from mandiant/dependabot/pip/pre-commit-3.5.0
build(deps-dev): bump pre-commit from 3.4.0 to 3.5.0
|
2023-10-17 09:59:30 +02:00 |
|
Willi Ballenthin
|
0324d24490
|
Merge pull request #1806 from mandiant/dependabot/pip/flake8-simplify-0.21.0
build(deps-dev): bump flake8-simplify from 0.20.0 to 0.21.0
|
2023-10-17 09:59:21 +02:00 |
|
Willi Ballenthin
|
41c286d1a3
|
Merge pull request #1805 from mandiant/dependabot/pip/pyinstaller-6.1.0
build(deps-dev): bump pyinstaller from 6.0.0 to 6.1.0
|
2023-10-17 09:59:13 +02:00 |
|