Commit Graph

3127 Commits

Author SHA1 Message Date
Capa Bot
6764830f2d Sync capa-testfiles submodule 2022-07-08 18:59:42 +00:00
Mike Hunhoff
747eed4db7 render: display number feature as hex vverbose (#1097) 2022-07-08 10:37:41 -06:00
Capa Bot
28f32eebfc Sync capa rules submodule 2022-07-07 21:24:45 +00:00
Capa Bot
3dbd57ffe4 Sync capa rules submodule 2022-07-07 21:23:20 +00:00
Capa Bot
e63a9c801b Sync capa rules submodule 2022-07-07 19:40:55 +00:00
Capa Bot
0fbea75513 Sync capa rules submodule 2022-07-07 17:38:22 +00:00
Mike Hunhoff
4b3129e30a ida: bug fixes including #1090 for Address abstraction (#1091) 2022-07-07 09:54:20 -06:00
Anushka Virgaonkar
10c16e8a71 fix #1089: add feature format to global scope (#1093) 2022-07-07 08:15:34 +02:00
Capa Bot
21efdd2e0e Sync capa rules submodule 2022-07-06 19:36:29 +00:00
dependabot[bot]
ac1add3fcb build(deps-dev): bump black from 22.3.0 to 22.6.0 (#1085)
Bumps [black](https://github.com/psf/black) from 22.3.0 to 22.6.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/22.3.0...22.6.0)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
2022-07-06 10:11:31 +02:00
Moritz
b4d2fecf4b fix: string extraction and rendering (#1083) 2022-07-05 13:17:24 -06:00
Capa Bot
ec81768fb5 Sync capa rules submodule 2022-07-05 15:37:24 +00:00
Capa Bot
0f60165135 Sync capa rules submodule 2022-07-05 07:53:28 +00:00
Capa Bot
7c54502dc8 Sync capa rules submodule 2022-07-05 07:17:51 +00:00
Moritz
38668b2c4a fix: use DnfileFeatureExtractor (#1088)
closes #1087
2022-07-05 07:53:47 +02:00
Moritz
d210645aee fix: api handling workaround (#1079)
* fix: api handling workaround

* fix: workaround .NET api handling
2022-07-01 17:37:56 +02:00
Capa Bot
444c30d720 Sync capa rules submodule 2022-07-01 14:50:27 +00:00
Willi Ballenthin
22bc26905f Merge pull request #1082 from mandiant/fix/addr-check
check address value
2022-07-01 08:49:17 -06:00
Moritz Raabe
9f4479582a check address value
closes #1081
2022-07-01 15:40:23 +02:00
Capa Bot
7bd49b56c4 Sync capa rules submodule 2022-06-30 15:17:33 +00:00
Capa Bot
9015761d4d Sync capa-testfiles submodule 2022-06-30 15:16:42 +00:00
Capa Bot
36eabc1c39 Sync capa rules submodule 2022-06-29 23:22:05 +00:00
Capa Bot
2f792427f9 Sync capa rules submodule 2022-06-29 17:55:13 +00:00
Capa Bot
cc06101cdc Sync capa rules submodule 2022-06-29 17:54:42 +00:00
Capa Bot
7387c56af9 Sync capa-testfiles submodule 2022-06-29 17:47:36 +00:00
Mike Hunhoff
998364d500 update documentation for .NET (#1074) 2022-06-29 08:22:48 -06:00
Willi Ballenthin
e7cf69a82e pep8 2022-06-28 15:58:02 -06:00
Willi Ballenthin
8dbb5a097c Merge branch 'master' of github.com:mandiant/capa 2022-06-28 15:54:19 -06:00
Willi Ballenthin
91818a116d scripts/capa_as_library: use new ResultDocument
closes #1071
2022-06-28 15:53:37 -06:00
Capa Bot
82e8f8f090 Sync capa rules submodule 2022-06-28 21:34:02 +00:00
Willi Ballenthin
2a0ada9848 Merge pull request #1072 from mandiant/revert-1014-fix/temp-accept-x32-x64-but-ignore
Revert "fix: temporarily accept x32/x64 flavors but ignore"
2022-06-28 14:28:08 -06:00
Willi Ballenthin
b87b03300a Revert "fix: temporarily accept x32/x64 flavors but ignore (#1014)"
This reverts commit daf483309e.
2022-06-28 14:27:48 -06:00
Capa Bot
ecd88680dd Sync capa rules submodule 2022-06-28 20:26:53 +00:00
Capa Bot
45c39cfd7a Sync capa rules submodule 2022-06-28 20:11:57 +00:00
Capa Bot
46ad23fb30 Sync capa rules submodule 2022-06-28 20:04:59 +00:00
Capa Bot
0e6a050921 Sync capa rules submodule 2022-06-28 20:04:14 +00:00
Moritz
f72f8b054a ci: use macos-11 (#1066)
* ci: use macos-11

* ci: use macos-10.15 for build
2022-06-28 21:47:06 +02:00
Willi Ballenthin
1d61b24eb0 Merge pull request #1055 from mandiant/dependabot/pip/types-requests-2.28.0
build(deps-dev): bump types-requests from 2.27.30 to 2.28.0
2022-06-28 11:35:09 -06:00
Willi Ballenthin
5a73a8d7bb Merge pull request #1069 from mandiant/fix-1053
render: verbose: render metadata tokens correctly
2022-06-28 11:30:48 -06:00
Willi Ballenthin
b2507d14c0 Merge pull request #1070 from mandiant/williballenthin-patch-1
changelog: document upcoming deprecation of SMDA backend
2022-06-28 11:30:10 -06:00
Willi Ballenthin
b6f932ea15 changelog: document upcoming deprecation of SMDA backend
closes #1061
2022-06-28 11:24:31 -06:00
Willi Ballenthin
bb1afb3356 render: verbose: render metadata tokens correctly
closes #1053
2022-06-28 11:18:24 -06:00
Capa Bot
d35ac32f0a Sync capa rules submodule 2022-06-28 17:13:42 +00:00
Willi Ballenthin
cb6781a143 verbose: remove extraneous import 2022-06-28 11:11:00 -06:00
Willi Ballenthin
e7fa1ae52c Merge pull request #1068 from mandiant/feat-lint-dotnet-filename
linter: expect file path "dotnet" for ".NET" rules
2022-06-28 11:05:37 -06:00
Willi Ballenthin
8b7ddc5679 linter: expect file path "dotnet" for ".NET" rules
ref: https://github.com/mandiant/capa-rules/pull/568#discussion_r908718249
2022-06-28 10:48:03 -06:00
Willi Ballenthin
3323d85067 Merge pull request #1067 from mandiant/fix-966
main: suppress low level ELF parsing log messages
2022-06-28 10:46:32 -06:00
Willi Ballenthin
9019e6b0f5 main: suppress low level ELF parsing log messages
closes #966
2022-06-28 10:45:38 -06:00
Capa Bot
c6c2fc9f2a Sync capa rules submodule 2022-06-28 16:44:02 +00:00
Willi Ballenthin
6ea15901d6 Merge pull request #1064 from mandiant/mr-tz-patch-1
Update README.md
2022-06-28 10:42:44 -06:00