Capa Bot
db790ab20c
Sync capa-testfiles submodule
2020-09-17 18:01:18 +00:00
Capa Bot
e10f6a2d58
Sync capa-testfiles submodule
2020-09-03 18:22:59 +00:00
William Ballenthin
a25a86e2d6
render: dont display rules that are also matched as subrule matches
...
closes #224
2020-09-02 10:20:54 -06:00
William Ballenthin
330c0f055e
Merge branch 'master' into fix-246
2020-08-31 22:30:39 -06:00
William Ballenthin
5f7f718fe4
tests: add test for #276
2020-08-31 20:31:36 -06:00
Capa Bot
08099f93a1
Sync capa-testfiles submodule
2020-09-01 16:56:04 +00:00
Willi Ballenthin
cbabf5650d
Merge pull request #273 from fireeye/fix-263
...
fix 263
2020-09-01 10:50:41 -06:00
William Ballenthin
090ec46ca4
features: extract import A/W variants and their base names
...
closes #246
2020-08-31 17:13:10 -06:00
William Ballenthin
5b349c1df8
tests: add feature tests for #246
2020-08-31 16:59:55 -06:00
William Ballenthin
7e0ebb8c5b
rules: fmt: fix formatting of description block
...
closes #263
2020-08-31 16:49:54 -06:00
William Ballenthin
0734edf6f0
tests: fmt: add test for #263
2020-08-31 16:34:10 -06:00
William Ballenthin
322d2ad549
tests: main: add tests for #262
2020-08-31 15:51:49 -06:00
William Ballenthin
fb4ef6b993
tests: add tests for #262
2020-08-31 15:38:07 -06:00
Capa Bot
846b40de9f
Sync capa-testfiles submodule
2020-08-31 20:59:52 +00:00
Capa Bot
0f44ec0dd8
Sync capa-testfiles submodule
2020-08-28 19:59:22 +00:00
Moritz Raabe
34e7991081
black 20.8b1 updates
2020-08-27 11:26:28 +02:00
Capa Bot
cb9bd2eab7
Sync capa-testfiles submodule
2020-08-27 08:40:12 +00:00
Michael Hunhoff
dc8870861b
fixes 249
2020-08-26 16:31:07 -06:00
Capa Bot
739100d481
Sync capa-testfiles submodule
2020-08-25 16:34:26 +00:00
Willi Ballenthin
585a9c167f
Merge pull request #243 from fireeye/fix-241
...
fix 241: string counting exception
2020-08-18 12:09:52 -06:00
Willi Ballenthin
385c956184
fixtures: fix doc
2020-08-17 20:53:34 -06:00
William Ballenthin
d3dad3a66a
rules: fix bug in string counting
...
closes #241
2020-08-16 21:38:13 -06:00
William Ballenthin
b084f7cb9b
pep8
2020-08-16 05:18:39 -06:00
William Ballenthin
89edaf4c5c
tests: xfail things that won't work on py3
2020-08-16 05:17:17 -06:00
William Ballenthin
295d3fee5d
tests: limit tests to py2/py3
2020-08-16 05:03:57 -06:00
William Ballenthin
0af6386693
tests: fixtures: add ctxmgr for catching xfail
2020-08-16 05:03:23 -06:00
William Ballenthin
1873d0b7c5
*: py3 compat
2020-08-16 05:03:08 -06:00
William Ballenthin
c032d556fb
tests: freeze: make py3 compatible
2020-08-16 05:02:35 -06:00
William Ballenthin
d7f1c23f4d
tests: show found number of features when unexpected
2020-08-16 05:01:20 -06:00
William Ballenthin
c1b7176e36
submodule: testfiles update
2020-08-14 13:34:43 -06:00
William Ballenthin
259a0a2007
tests: ida: remove old print
2020-08-14 13:15:22 -06:00
William Ballenthin
eee565b596
tests: ida: tweak tests to fit IDA behavior
2020-08-14 13:10:38 -06:00
William Ballenthin
26061c25a5
tests: fixtures: add mapping from test data to md5
2020-08-14 12:58:08 -06:00
William Ballenthin
897da4237d
tests: fixtures: remove lru_cache on some accessors
2020-08-14 12:48:19 -06:00
William Ballenthin
1923d479d8
tests: fixtures: fix name error
2020-08-14 12:35:30 -06:00
William Ballenthin
6b8bce4f42
tests: fixtures: factor out resolution of scope/sample
2020-08-14 12:34:00 -06:00
William Ballenthin
107a68628b
tests: ida: attempt to use new framework (wip)
2020-08-14 12:22:59 -06:00
William Ballenthin
26c9811ba1
tests: viv: fix typo preventing some tests from running
2020-08-14 12:22:39 -06:00
William Ballenthin
b784f086b4
tests: make fixtures more consistent in prep for other backends
2020-08-14 12:04:53 -06:00
William Ballenthin
8cbe3f8546
tests: move expected features into fixtures for reuse
...
closes #225
2020-08-14 11:25:00 -06:00
Ana María Martínez Gómez
adaac03d1d
extractor: remove characteristic(switch)
...
Get rid of the `characteristic(switch)` feature as any of our rules use
it and its analysis is not very easy. Analysis results most likely
differ across backends, leading to inconsistency.
2020-08-13 16:47:01 +02:00
Capa Bot
e64277ed41
Sync capa-testfiles submodule
2020-08-12 23:26:45 +00:00
Willi Ballenthin
744b4915c9
Merge pull request #226 from fireeye/enhancement-223
...
IDA: resolve nested data references to strings/bytes
2020-08-12 09:05:11 -06:00
Capa Bot
15607d63ab
Sync capa-testfiles submodule
2020-08-11 21:03:00 +00:00
Michael Hunhoff
70b4546c33
adding test for unmapped immediate data reference
2020-08-11 14:13:43 -06:00
Michael Hunhoff
791afd7ac8
adding code to emit number feature for unmapped immediate data reference
2020-08-11 14:12:41 -06:00
Michael Hunhoff
79d94144c6
adding IDA extractor code to resolve nested data references for string and bytes features
2020-08-11 08:44:44 -06:00
Capa Bot
7d62156a29
Sync capa-testfiles submodule
2020-08-11 07:12:56 +00:00
Capa Bot
23d31c3c2c
Sync capa-testfiles submodule
2020-08-05 18:50:52 +00:00
William Ballenthin
4bb13d6075
tests: ida: fix offset arch test
2020-08-04 10:35:10 -06:00