Yacine Elhamer
e9a9b3a6b6
point the data file to the latest PR
2023-08-26 13:04:45 +02:00
Willi Ballenthin
a734358377
rules: use Scope enum instead of constants
2023-08-25 12:54:57 +00:00
Yacine Elhamer
f34b0355e7
test_result_document.py: re-enable result-document related tests
2023-08-25 10:56:12 +02:00
Yacine
d66f834e54
Update tests/test_scripts.py
...
Co-authored-by: Moritz <mr-tz@users.noreply.github.com >
2023-08-24 13:48:32 +02:00
Yacine Elhamer
3574bd49bd
Merge remote-tracking branch 'parentrepo/dynamic-feature-extraction' into fix-cape2fmt
2023-08-24 14:48:07 +02:00
Yacine Elhamer
46217a3acb
test_main.py: remove unused pytest
2023-08-24 14:47:40 +02:00
Yacine Elhamer
9eb1255b29
cape2yara.py: update for use of scopes, and fix bug
2023-08-24 14:32:49 +02:00
Yacine Elhamer
7c101f01e5
test_binja.py: revert ruleset-related xfails
2023-08-24 13:36:53 +02:00
Yacine Elhamer
42689ef1da
test_main.py: revert ruleset-related xfails
2023-08-24 13:30:22 +02:00
Yacine Elhamer
d1068991e3
test_rules_insn_scope.py: update rules missing the dynamic scope
2023-08-22 16:26:54 +02:00
Willi Ballenthin
4ab240e990
rules: add scope terms "unsupported" and "unspecified"
...
closes #1744
2023-08-22 12:58:06 +00:00
Willi Ballenthin
8788a40d12
Merge branch 'dynamic-feature-extraction' into feat/cape-pydantic
2023-08-16 13:13:29 +02:00
Willi Ballenthin
4be1c89c5b
cape: models: more data shapes
2023-08-16 09:50:13 +00:00
Willi Ballenthin
26539e68d9
cape: models: add tests
2023-08-16 08:57:54 +00:00
Willi Ballenthin
bb2b1824a9
Merge branch 'master' into dynamic-feature-extraction
2023-08-15 14:01:30 +02:00
Willi Ballenthin
59a129d6d6
cape: add pydantic model for v2.2
2023-08-15 11:54:15 +00:00
Willi Ballenthin
db40d9bc7a
wip: add initial CAPE model
2023-08-15 11:41:11 +00:00
Yacine
d71ecc7a79
Update tests/test_ida_features.py
...
Co-authored-by: Moritz <mr-tz@users.noreply.github.com >
2023-08-15 12:26:19 +02:00
Willi Ballenthin
827b4b29b4
test_rules: fix rule scoping logic
2023-08-15 09:21:49 +00:00
Willi Ballenthin
2a31b16567
merge
2023-08-15 08:56:41 +00:00
Willi Ballenthin
e6d64ef561
pydantic: remove use of deprecated routines
...
closes #1718
2023-08-15 08:41:56 +00:00
Willi Ballenthin
408c5076c6
tests: ida: don't collect tests as pytest tests
...
closes #1719
2023-08-15 08:26:59 +00:00
Willi Ballenthin
c001c883f7
Merge pull request #1714 from mandiant/fix/issue-1697-1
...
rule scoping tweaks
2023-08-15 10:16:01 +02:00
Willi Ballenthin
4978aa74e7
tests: temporarily xfail script test
...
closes #1717
2023-08-15 08:13:14 +00:00
Willi Ballenthin
8479bc2f1f
Merge pull request #1720 from mandiant/fix/issue-1705
...
elf: detect Android OS via note and dependencies
2023-08-14 13:11:23 +02:00
Capa Bot
7c1522d84d
Sync capa-testfiles submodule
2023-08-14 11:11:05 +00:00
Willi Ballenthin
e6cb3d3b3b
os: detect Android via dependencies, too
2023-08-14 10:27:19 +00:00
Willi Ballenthin
8202e9e921
main: don't use analysis flavor to filter rules
...
im worried this will interact poorly with our rule cache,
unless we add more handling there, which needs more testing.
so, since the filtering likely has only a small impact on performance,
revert the rule filtering changes for simplicity.
2023-08-11 10:36:59 +00:00
Willi Ballenthin
6de23a9748
tests: main: demonstrate CAPE analysis (and bug #1702 )
2023-08-11 08:56:06 +00:00
Willi Ballenthin
1cf33e4343
tests: create workspaces only during tests, not import
...
closes #1707
2023-08-11 08:38:06 +00:00
Willi Ballenthin
34db63171f
sync submodule testfiles
2023-08-11 08:36:29 +00:00
Willi Ballenthin
c1fbb27d73
Merge branch 'master' into dynamic-feature-extraction
2023-08-10 13:21:49 +00:00
Capa Bot
e5efc158b7
Sync capa-testfiles submodule
2023-08-10 07:26:08 +00:00
Aayush Goel
232c9ce35c
Add test for script & output rendered
2023-08-07 22:43:25 +05:30
Willi Ballenthin
74d9b06835
Merge pull request #1679 from Aayush-Goel-04/Aayush-Goel-04/Issue#1582
...
bump pydantic to 2.1.1
2023-08-07 12:02:53 +02:00
Yacine Elhamer
aacd9f51b3
delete empty files
2023-08-07 09:48:11 +01:00
Yacine
95148d445a
test_rules.py: update rules' formatting
...
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com >
2023-08-07 09:47:57 +01:00
Yacine
65ac422e36
test_rules.py: update rules' fomratting
...
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com >
2023-08-07 09:47:37 +01:00
Willi Ballenthin
5ffb6ca0cd
Merge branch 'dynamic-feature-extraction' into call-scope
2023-08-07 10:40:53 +02:00
Willi Ballenthin
85f151303a
merge
2023-08-07 08:40:03 +00:00
Willi Ballenthin
216cd01b3c
sync test data submodule
2023-08-07 08:37:23 +00:00
Capa Bot
2c8f99143a
Sync capa-testfiles submodule
2023-08-05 16:40:13 +00:00
Capa Bot
ee68031d19
Sync capa-testfiles submodule
2023-08-05 16:37:46 +00:00
Yacine Elhamer
8dc4adbb5e
fix test_rules.py yaml identation bug
2023-08-04 16:20:37 +01:00
Yacine Elhamer
8b36cd1e35
add call-scope tests
2023-08-04 16:20:37 +01:00
Aayush Goel
2bed3468f6
bump pydantic to 2.1.1
2023-08-03 17:21:46 +05:30
Yacine Elhamer
ca2760fb46
Initial commit
2023-08-02 22:46:54 +01:00
Willi Ballenthin
727ece499a
Merge pull request #1662 from Aayush-Goel-04/Aayush-Goel-04/Issue#1607
...
ELF: Implement file import and export name extractor
2023-08-02 13:15:32 +02:00
Aayush Goel
62f50265bc
Resolved Import address
2023-08-02 16:41:24 +05:30
Capa Bot
d18224eac6
Sync capa-testfiles submodule
2023-08-02 11:03:16 +00:00