Commit Graph

2619 Commits

Author SHA1 Message Date
Willi Ballenthin dcdc70de49 Merge branch 'feature-981' of github.com:mandiant/capa into feature-981 2022-06-06 13:49:28 -06:00
Willi Ballenthin f8b10a2c0a render: verbose: update to use new result document 2022-06-06 13:48:41 -06:00
Willi Ballenthin 5960f51f13 result document: fix type of statement node 2022-06-06 13:47:39 -06:00
Willi Ballenthin 59e0518e6d pep8/mypy 2022-06-06 13:47:17 -06:00
Willi Ballenthin afc2953538 frz: address: make sortable 2022-06-06 13:45:13 -06:00
Willi Ballenthin f58966acf8 address: implement repr, not str 2022-06-06 13:44:59 -06:00
Willi Ballenthin cb44704d38 features: bb: add description to BasicBlock feature 2022-06-06 13:44:40 -06:00
Willi Ballenthin ab4177fae1 render: default: fix rendering of mbc/att&ck 2022-06-06 13:44:08 -06:00
Willi Ballenthin 867662ba5a rules: remove unused rule-category meta 2022-06-06 13:43:44 -06:00
Willi Ballenthin 5084cb0887 Merge branch 'feature-981' of github.com:mandiant/capa into feature-981 2022-05-31 07:45:38 -06:00
Willi Ballenthin 5d6c12d900 sync rules 2022-05-31 07:45:13 -06:00
Willi Ballenthin 42e2c53e5e wip: pydantic result document 2022-05-31 07:40:50 -06:00
Willi Ballenthin 8080752815 freeze: pass descriptions around 2022-05-31 07:40:30 -06:00
Willi Ballenthin 2dec484676 typing fixes 2022-05-31 07:40:20 -06:00
Willi Ballenthin 4ae4bab254 lint: use meta.authors 2022-05-26 12:02:47 -06:00
Willi Ballenthin 9236a36ef4 rule: factor out is subscope check 2022-05-26 10:24:31 -06:00
Willi Ballenthin b2318ce957 features: remove freeze_(de)serialize with preference to freeze module 2022-05-25 17:19:56 -06:00
Willi Ballenthin 3879e33cce freeze: model each features separately 2022-05-25 17:12:02 -06:00
Willi Ballenthin eb6de90059 changelog 2022-05-25 15:30:46 -06:00
Willi Ballenthin 6b633efdba freeze: fix schema to support overlapping functions 2022-05-25 15:28:02 -06:00
Willi Ballenthin 02cef8297c pep8 2022-05-25 15:27:56 -06:00
Willi Ballenthin adb425aeb3 freeze: use pydantic for (de)serialization
also, move null extractor to its own namespace
2022-05-25 15:09:31 -06:00
Willi Ballenthin b1fa5be7b1 show-features: render features in a tree to better group scopes 2022-05-25 15:08:44 -06:00
Willi Ballenthin d7cfa4ee96 features: make features implement __lt__ 2022-05-25 15:08:26 -06:00
Willi Ballenthin a4003d7d91 tests: fix scripts using json document 2022-05-24 14:50:17 -06:00
Willi Ballenthin b35fe6cdb2 json, render: work with and serialize addresses 2022-05-24 13:52:56 -06:00
Willi Ballenthin d728869690 freeze: mypy and pep8 2022-05-24 13:52:40 -06:00
Willi Ballenthin 6b6dd70110 freeze: use address abstraction 2022-05-24 12:30:06 -06:00
Willi Ballenthin fc9681f6d5 helpers: fix import loop 2022-05-24 12:29:56 -06:00
Willi Ballenthin e4caa1d729 base extractor: use handles 2022-05-24 12:29:38 -06:00
Willi Ballenthin 4a577fabfc Merge pull request #1031 from mandiant/fix/ida-plugin
fix: rule generator handles
2022-05-23 11:29:48 -06:00
Moritz Raabe a4f0c1c04c fix: rule generator handles 2022-05-19 20:43:02 +02:00
Willi Ballenthin 7642db332a Merge pull request #1029 from mandiant/feat/981-add-ida-handles
feat: add IDA handles and type annotations
2022-05-17 09:33:46 -06:00
Moritz Raabe 8e1f710312 fix: add __str__ 2022-05-12 18:49:53 +02:00
Moritz Raabe 83cae29dbe ci: temporarily test on PR 2022-05-12 18:40:45 +02:00
Moritz Raabe b2853cc56b feat: update dnfile tests and extractor 2022-05-12 18:37:02 +02:00
Moritz Raabe d8c9941f6b fix: filter address 2022-05-12 16:39:36 +02:00
Moritz Raabe 716a73dfb4 feat: add handles and type annotations 2022-05-12 15:42:25 +02:00
Willi Ballenthin 7b05fc4180 pep8 + mypy 2022-05-11 13:25:25 -06:00
Willi Ballenthin 78e9280a93 Merge branch 'master' into feature-981 2022-05-11 13:20:48 -06:00
Willi Ballenthin ca2adb85b0 Merge pull request #1026 from mandiant/dependabot/pip/types-colorama-0.4.14
build(deps-dev): bump types-colorama from 0.4.13 to 0.4.14
2022-05-11 13:12:39 -06:00
Willi Ballenthin fca612e873 Merge pull request #1025 from mandiant/dependabot/pip/types-tabulate-0.8.9
build(deps-dev): bump types-tabulate from 0.8.8 to 0.8.9
2022-05-11 13:12:30 -06:00
Willi Ballenthin 71cf19b850 render: handle dn tokens 2022-05-11 12:51:42 -06:00
Willi Ballenthin a734a045ae dnfile: address: use rva 2022-05-11 12:51:29 -06:00
Capa Bot 141da27715 Sync capa rules submodule 2022-05-11 16:34:46 +00:00
dependabot[bot] 7971b94001 build(deps-dev): bump types-colorama from 0.4.13 to 0.4.14
Bumps [types-colorama](https://github.com/python/typeshed) from 0.4.13 to 0.4.14.
- [Release notes](https://github.com/python/typeshed/releases)
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: types-colorama
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-09 14:13:43 +00:00
dependabot[bot] 95b3c6a594 build(deps-dev): bump types-tabulate from 0.8.8 to 0.8.9
Bumps [types-tabulate](https://github.com/python/typeshed) from 0.8.8 to 0.8.9.
- [Release notes](https://github.com/python/typeshed/releases)
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: types-tabulate
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-09 14:13:40 +00:00
Mike Hunhoff 0d849142ba dotnet: emit mixed mode characteristic (#1024) 2022-05-06 14:32:06 -06:00
Moritz f96c7379e0 Merge pull request #1021 from mandiant/ci/fix-build-workflow
ci: build on PR
2022-05-06 22:07:53 +02:00
Mike Hunhoff 6fb9dd961a dotnet: emit unmanaged call characteristic (#1023) 2022-05-06 13:05:48 -06:00