William Ballenthin
d1dd997b7b
setup: add dev dependencies
...
closes #21
2020-06-26 18:59:23 -06:00
William Ballenthin
26fef7c615
*: formatting
2020-06-26 18:44:19 -06:00
William Ballenthin
f82e453440
linter: learn to check for unusual meta fields
...
closes #24
2020-06-26 18:32:17 -06:00
William Ballenthin
8f5f5b329d
rule: declare the expected hidden meta fields
2020-06-26 18:31:26 -06:00
William Ballenthin
8ab91269fa
linter: learn to check namespace matches rule path
...
closes #6
2020-06-26 18:23:47 -06:00
William Ballenthin
22537eb936
linter: learn to check filename to match rule name
...
closes #7
2020-06-26 18:16:20 -06:00
William Ballenthin
5de0884dd2
main: learn to save off the path to each rule
2020-06-26 18:09:51 -06:00
William Ballenthin
d32c20d140
linter: check for namespace instead of rule-category
2020-06-26 17:53:37 -06:00
William Ballenthin
35faa20e9e
linter: check for namespace instead of rule-category
2020-06-26 17:52:32 -06:00
William Ballenthin
36749df848
submodule: rules: bump to rule-organization PR
2020-06-26 17:49:54 -06:00
William Ballenthin
3e973b4307
scripts: migrate-rules: fixup matches references
2020-06-26 17:43:31 -06:00
William Ballenthin
be1a7a06e1
scripts: migrate-rule: respect lib meta
2020-06-25 17:29:08 -06:00
William Ballenthin
45dea2b8aa
scripts: migrate rules: respect nursery status
2020-06-22 07:40:55 -06:00
William Ballenthin
11e456f55e
Merge branch 'master' of github.com:fireeye/capa
2020-06-22 07:00:57 -06:00
Willi Ballenthin
348e6c0315
Merge pull request #30 from fireeye/capa-explorer-remove-empty-structural-expressions
...
capa explorer remove empty structural expressions
2020-06-26 16:31:46 -06:00
Michael Hunhoff
65a4960ce9
code changes
2020-06-26 14:44:52 -06:00
Michael Hunhoff
009368f278
removing empty structural expressions from tree view
2020-06-26 14:38:14 -06:00
Willi Ballenthin
68736a07f6
Merge pull request #29 from fireeye/default-sort-capa-explorer
...
capa explorer tree view default to sorted asc, trim regex matches
2020-06-26 11:51:18 -06:00
Michael Hunhoff
540f68c5c7
tree view default to sorted asc, trim regex matches
2020-06-26 11:28:11 -06:00
Willi Ballenthin
7ff69097db
Merge pull request #27 from fireeye/fix/dont-show-subscope-rules
...
do not display subscope rules in any mode
2020-06-26 11:20:25 -06:00
Moritz Raabe
dcd66f41fa
do not display subscope rules in any mode
2020-06-26 16:19:07 +02:00
Willi Ballenthin
b973d7fc50
Merge pull request #26 from fireeye/vverbose-output-scope-enhancement
...
enhancements for displaying relevant scope data for vverbose and verbose display
2020-06-25 13:47:00 -06:00
Michael Hunhoff
e1f924ffd1
tweak verbose display to remove empty va addresses for file scope
2020-06-25 13:39:05 -06:00
Michael Hunhoff
4740bf576b
Merge branch 'master' into vverbose-output-scope-enhancement
2020-06-25 13:23:00 -06:00
Michael Hunhoff
9d5ecadf95
adding support to display appropriate scope name in vverbose mode
2020-06-25 13:22:07 -06:00
Moritz
290af74368
Merge pull request #17 from fireeye/add-warnings-dialog-capa-explorer
...
adding new checks for file format limitations in capa explorer plugin
2020-06-25 21:07:13 +02:00
Michael Hunhoff
25f0262748
moving code around for supported file type dialouge in standalone tool and capa explorer
2020-06-25 11:09:47 -06:00
Michael Hunhoff
a5004b2014
adding support checks for AMD64/binary files in capa explorer and capa main
2020-06-25 10:05:19 -06:00
Michael Hunhoff
83dbf81d2b
adding new checks for file format limitations in capa explorer plugin
2020-06-24 16:29:30 -06:00
Willi Ballenthin
9842ae6c8f
Merge pull request #10 from fireeye/doc/code-review-improvements
...
update documentation
2020-06-24 08:23:12 -06:00
Willi Ballenthin
53f374024b
Merge branch 'master' into doc/code-review-improvements
2020-06-24 08:22:52 -06:00
Willi Ballenthin
fb6d8354bd
Merge pull request #11 from fireeye/mr-tz-update-setup-hooks
...
Update setup-hooks.sh
2020-06-24 08:17:02 -06:00
Willi Ballenthin
3defaf0d22
Merge pull request #13 from fireeye/all-the-single-quotes
...
double to single quotes
2020-06-24 08:15:58 -06:00
Moritz Raabe
beba3fb3c7
double to single quotes
2020-06-24 15:00:35 +02:00
Moritz
95b3b129ec
Update setup-hooks.sh
2020-06-24 14:29:50 +02:00
Moritz Raabe
730f0b21fe
document -t (tag) option
2020-06-24 13:23:46 +02:00
Moritz
d3d7070e95
Merge pull request #9 from fireeye/ana-build
...
Remove Build Status from README
2020-06-24 13:01:20 +02:00
Moritz Raabe
d2d1f26e7b
update documentation
2020-06-24 12:55:35 +02:00
Ana María Martínez Gómez
72b6ee5cf3
Remove Build Status from README
...
This should have been removed as part of the migration. The build status
in the README will be reimplemented using GitHub Actions and
https://shields.io
2020-06-24 12:31:01 +02:00
Willi Ballenthin
fa9bb946ed
Merge pull request #1 from fireeye/ana-hooks
...
Add hooks for running linters and tests
2020-06-22 09:42:07 -06:00
Willi Ballenthin
273ca81919
Merge pull request #2 from fireeye/doc/submodule-install
...
add submodule doc
2020-06-22 09:41:29 -06:00
William Ballenthin
dfaa907319
scripts: migrate rules: better variable names
2020-06-22 07:00:23 -06:00
William Ballenthin
ffd926c84c
scripts: migrate-rules: detect rules that aren't in the migration plan
2020-06-22 06:59:10 -06:00
Moritz Raabe
b466087c97
add submodule doc
2020-06-22 12:48:53 +02:00
Ana María Martínez Gómez
96ad823e35
Add hooks for running linters and tests
...
Add the `scripts/setup-hooks.sh` script which sets the following hooks
up:
- The `post-commit` hook runs the linter after every `git commit`,
letting you know if there are code style or rule linter offenses you
need to fix.
- The `pre-push` hook runs the linter and the tests and block the `git
push` if they do not succeed.
This way you realise if everything is alright without the need of
sending a PR.
2020-06-22 11:35:45 +02:00
William Ballenthin
5eddc9d3f4
scripts: migrate-rules: parse ATT&CK from tag name
2020-06-21 17:59:16 -06:00
Willi Ballenthin
8f097b883c
Merge pull request #25 from fireeye/rule-organization
...
apply rule reorganization
2020-06-25 13:42:38 -06:00
William Ballenthin
c06a1dae8a
scripts: migrate-rules: migrates rules pretty well
2020-06-21 17:40:16 -06:00
William Ballenthin
07daf3d46b
rule: fmt: support pulling meta from the rule instance
2020-06-21 16:57:58 -06:00
William Ballenthin
23037ad763
tests: fmt: fix expected format
2020-06-21 16:56:17 -06:00
