gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2026-07-28 14:47:08 -07:00
Code Issues Packages Projects Releases Wiki Activity
6,014 Commits 53 Branches 49 Tags
ed7e0cd77de0b69347a8dc1230a39443cc6cbb95
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mike HunhoffandGitHub ed7e0cd77d lint: replace black/isort/flake8 with ruff (#2992) 
* lint: replace isort/flake8 with ruff

* update ruff links

* remove stale isort reference

* update CHANGELOG

* address review

* remove unused imports

* remove unnecessary list comprehension

* remove quotes from type annotation

* use dict.get instead of if-else block

* remove unnecessary utf-8 encoding declaration

* Revert "remove unused imports"

This reverts commit 18ba50a22b.

* skip check for unused imports

* fix UP036 Version block is outdated for minimum Python version

* add TODO comment for unused imports

* replace black with ruff

* address review comments
 2026-04-07 12:10:41 -06:00
Mike HunhoffandGitHub a6ac839eea fix mypy formatting (#2973) 2026-03-27 10:54:28 -06:00
Mike HunhoffandGitHub 5a5545aa14 ghidra: fix unit tests (#2812) 
* ghidra: fix unit tests

* fix formatting
 2026-01-15 12:34:43 -07:00
Mike HunhoffGitHubgemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 		66dc70a775 ghidra: support PyGhidra (#2788) 
* ghidra: init commit switch to PyGhidra

* update CHANGELOG and PyGhidra version requirements

* Update capa/features/extractors/ghidra/helpers.py

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

* fix black errors

* support Ghidra v12

* remove deprecated APIs

* refactor outdated code

* fix pyinstaller, code refactoring

* address PR feedback

* add back capa_explorer.py

* beef up capa_explorer.py script

* refactor README

* refactor README

* fix #2747

* add sha256 check for workflows

* add sha256 check for workflows

* add sha256 check for workflows

---------

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 2025-12-18 17:55:49 -07:00
Mike HunhoffandGitHub ffce77b13d ci: deprecate macos-13 runner and use Python v3.13 for testing (#2777) 2025-11-24 19:53:39 -07:00
Mike HunhoffandGitHub 7844ebb144 v9.3.1 (#2769) 2025-11-20 08:37:49 -07:00
Mike HunhoffandGitHub 7780b9e8a8 explorer: add missing ida-netnode dependency to project.toml (#2765) 2025-11-18 08:55:57 -07:00
Mike HunhoffandGitHub 8d39765e7b ci: bump binja minor version (#2763) 2025-11-17 11:10:46 -07:00
Mike HunhoffGitHubgemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 		acb34e88d6 Update CHANGELOG.md 
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
 2025-10-20 09:05:30 -06:00
Mike HunhoffandGitHub 42b6d8106a binja: update core version info check (#2709) 2025-08-20 11:56:56 -06:00
Mike HunhoffandGitHub d6f442b5bd ci: remove redundant "test_run" action (#2692) 
* ci: remove redundant "test_run" action

* update CHANGELOG
 2025-06-10 16:43:10 -06:00
Mike HunhoffandGitHub fa5d9a9302 v9.2.1 (#2685) 2025-06-06 14:16:25 -06:00
Mike HunhoffandGitHub 30fb4751f6 fix build issues discovered during and after v9.2.0 release (#2684) 
* ci: downgrade Ubuntu version to accommodate older GLIBC versions

* ci: upgrade Windows version to avoid deprecation

* ci: exclude pkg_resources from PyInstaller build

* update CHANGELOG

* update spec file

* ci: check if build runs without warnings or errors

* update CHANGELOG

* update build commands

* update build commands

* update build commands

* update build commands

* update build commands
 2025-06-06 12:02:06 -06:00
Mike HunhoffandGitHub a8eab7ddf0 update "publish package" worflow to 1.12.4 (#2680) 2025-06-05 13:44:30 -06:00
Mike HunhoffandGitHub 5ad1dda918 v9.2.0 (#2677) 2025-06-05 09:03:56 -06:00
Mike HunhoffandGitHub 98725c52dc vmray: do not restrict analysis to PE and ELF files, e.g. docx (#2672) 
* vmray: do not restrict analysis to PE and ELF files, e.g. docx

* update CHANGELOG
 2025-05-30 13:53:12 -06:00
Mike HunhoffandGitHub 96d1eb64c3 update binja core version (#2670) 
* update binja core version

* update CHANGELOG
 2025-05-30 10:52:56 -06:00
Mike HunhoffandGitHub 7407cb39ca add lint for registry control set regex that is not complete (#2643) 
* add lint for registry control set regex that is not complete

* update CHANGELOG
 2025-03-24 12:17:12 -06:00
Mike HunhoffGitHubWilli Ballenthin
 		1572dd87ed lint: add WARN for regex features that contain unescaped dot (#2635) 
* lint: add WARN for regex features that contain unescaped dot

* refactor comments

* update CHANGELOG

* address PR feedback

* Update scripts/lint.py

Co-authored-by: Willi Ballenthin <wballenthin@google.com>

* Update scripts/lint.py

Co-authored-by: Willi Ballenthin <wballenthin@google.com>

---------

Co-authored-by: Willi Ballenthin <wballenthin@google.com>
 2025-03-18 15:05:57 -06:00
Mike HunhoffandGitHub 7ecf292095 render: don't assume prior matches exist within thread (#2612) 
* render: don't assume prior matches exist within thread

* update CHANGELOG

* update comments
 2025-03-03 17:49:03 -07:00
Mike HunhoffandGitHub d3d71f97c8 vmray: only verify process OS and monitor ID match (#2613) 2025-02-24 14:14:05 -07:00
Mike HunhoffandGitHub a278bf593a cape: models: parse minimum fields required for analysis (#2607) 
* cape: models: parse minimum fields required for analysis

* update CHANGELOG
 2025-02-19 08:55:12 -07:00
Mike HunhoffandGitHub 160ce73a35 vmray: loosen file checks to enable processing of additional file types (#2571) 
* vmray: loosen file checks to enable addtional file types

* additional refactor to loosen file checks

* update CHANGELOG

* cleanup comments and small code refactor

* fix lints

* use NO_ADDRESS for submissions that don't have a base address

* update comments

* add test for ps1 trace
 2025-01-23 12:47:36 -07:00
Mike HunhoffandGitHub c3c93685e2 vmray: skip non-printable strings (#2551) 2025-01-08 08:40:32 -07:00
Mike Hunhoff 80e007787c dynamic: update CHANGELOG 2024-09-26 14:43:20 -06:00
Mike Hunhoff bfcc705117 dynamic: vmray: remove redundant test 2024-09-26 14:42:08 -06:00
Mike Hunhoff 834150ad1d dynamic: drakvuf: fix A/W API detection 2024-09-26 14:36:16 -06:00
Mike Hunhoff 31ec208a9b dynamic: cape: fix A/W API detection 2024-09-26 14:27:45 -06:00
Mike Hunhoff a5d9459c42 dynamic: vmray: fix A/W API detection 2024-09-26 14:15:21 -06:00
Mike Hunhoff a8d849e872 vmray: improve comments models.py 2024-07-30 11:43:53 -06:00
Mike Hunhoff 71c515d4d7 vmray: improve comments __init__.py 2024-07-29 12:19:53 -06:00
Mike Hunhoff 139dcc430c vmray: improve logging 2024-07-29 12:16:05 -06:00
Mike Hunhoff 7bf0b396ee core: improve error message for vmray 2024-07-29 12:02:14 -06:00
Mike Hunhoff 87dfa50996 scripts: remove old code from show-features.py 2024-07-29 12:00:29 -06:00
Mike Hunhoff 8cba23bbce vmray: improve extract_import_names 2024-07-29 11:49:04 -06:00
Mike Hunhoff 1a3cf4aa8e vmray: update extractor.py format_params 2024-07-29 11:41:31 -06:00
Mike Hunhoff 51b853de59 vmray: remove bad print statements 2024-07-29 11:39:03 -06:00
Mike Hunhoff 3043fd6ac8 vmray: merge upstream 2024-07-29 11:37:37 -06:00
Mike Hunhoff b967213302 vmray: improve comments __init__.py 2024-07-25 12:30:20 -06:00
Mike Hunhoff 05fb8f658f vmray: fix flake8 lints 2024-07-25 12:19:22 -06:00
Mike Hunhoff 7b3812ae19 vmray: improve error reporting 2024-07-25 12:12:49 -06:00
Mike Hunhoff 5b7a2be652 vmray: remove outdated comments __init__.py 2024-07-25 09:33:17 -06:00
Mike Hunhoff b8d3d77829 vmray: document vmray support in README 2024-07-24 10:35:34 -06:00
Mike Hunhoff 9a1364c21c vmray: document vmray support in README 2024-07-24 10:32:22 -06:00
Mike Hunhoff 6e146bb126 vmray: fix lints 2024-07-24 10:12:21 -06:00
Mike Hunhoff 85373a7ddb cape: add explicit check for CAPE report format file extension 2024-07-24 10:09:22 -06:00
Mike Hunhoff f6d12bcb41 vmray: fix lints 2024-07-24 10:03:57 -06:00
Mike Hunhoff f471386456 vmray: merge upstream and fix conflicts 2024-07-24 10:02:07 -06:00
Mike Hunhoff 31e53fab20 vmray: improve models.py comments 2024-07-23 09:52:36 -06:00
Mike Hunhoff cbdc7446aa vmray: merge upstream 2024-07-23 09:49:40 -06:00
Mike Hunhoff 46b68d11b7 vmray: improve models.py comments 2024-07-23 09:48:52 -06:00
Mike Hunhoff 3b94961133 vmray: complete pefile model tests 2024-07-19 15:50:07 -06:00
Mike Hunhoff 6ef485f67b vmray: refactor model tests 2024-07-19 15:44:53 -06:00
Mike Hunhoff 4dfc53a58f vmray: refactor model tests 2024-07-19 15:42:04 -06:00
Mike Hunhoff 98939f8a8f vmray: improve FunctionCall model 2024-07-19 15:38:26 -06:00
Mike Hunhoff 4490097e11 vmray: add summary_v2.json model tests 2024-07-19 15:28:47 -06:00
Mike Hunhoff 2ba2a2b013 vmray: remove unneeded json.loads from __init__.py 2024-07-19 15:05:21 -06:00
Mike Hunhoff 28792ec6a6 vmray: add model tests for FunctionCall 2024-07-19 13:56:46 -06:00
Mike Hunhoff 658927c103 vmray: refactor models.py 2024-07-19 11:58:48 -06:00
Mike Hunhoff 673f7cccfc vmray: refactor models.py 2024-07-19 11:57:07 -06:00
Mike Hunhoff 6e0dc83451 vmray: refactor global_.py 2024-07-19 11:51:16 -06:00
Mike Hunhoff 8bf0d16fd8 vmray: add init support for ELF files 2024-07-18 17:52:33 -06:00
Mike Hunhoff 24a31a8bc3 vmray: add comments to __init__.py 2024-07-18 14:23:20 -06:00
Mike Hunhoff 6f7cc7cdb0 vmray: improve detections for unsupported input files 2024-07-18 11:33:42 -06:00
Mike Hunhoff 64a09d3146 vmray: remove broken assert for unique OS PIDs 2024-07-18 11:20:03 -06:00
Mike Hunhoff 998537ddf8 vmray: remove outdated comments 2024-07-18 09:10:50 -06:00
Mike Hunhoff 5afea29473 vmray: update CHANGELOG release notes with VMRay integration 2024-07-18 09:06:58 -06:00
Mike Hunhoff fd7bd94b48 vmray: remove outdated comments 2024-07-18 08:50:20 -06:00
Mike Hunhoff 330c77a32a vmray: implement get_call_name 2024-07-17 15:04:00 -06:00
Mike Hunhoff 19a6f3ad49 vmray: improve supported file type validation 2024-07-17 12:37:51 -06:00
Mike Hunhoff 100df45cc0 vmray: add logging for skipped deref param types 2024-07-17 12:27:14 -06:00
Mike Hunhoff cc87ef39d5 vmray: remove and document extract_call_features comments 2024-07-17 12:18:01 -06:00
Mike Hunhoff ec7e43193e vmray: update comment for extract_process_features 2024-07-17 12:10:18 -06:00
Mike Hunhoff b68a91e10b vmray: validate supported flog version 2024-07-17 12:06:23 -06:00
Mike Hunhoff 15889749c0 vmray: merge upstream 2024-07-17 11:54:58 -06:00
Mike Hunhoff af26bef611 vmray: fix lints 2024-07-12 20:21:57 -06:00
Mike Hunhoff 42fddfbf31 vmray: improve comments 2024-07-12 20:19:06 -06:00
Mike Hunhoff 5214675eeb vmray: update tests.yml 2024-07-12 19:55:06 -06:00
Mike Hunhoff 4f2467cae0 vmray: update CHANGELOG 2024-07-12 19:53:33 -06:00
Mike Hunhoff 28c278b9e6 vmray: improve comments 2024-07-12 19:09:10 -06:00
Mike Hunhoff 26b5870ef4 vmray: improve comments 2024-07-12 19:06:06 -06:00
Mike Hunhoff 1f5b6ec52c vmray: improve comments 2024-07-12 19:00:48 -06:00
Mike Hunhoff 307b0cc327 vmray: add comments 2024-07-12 18:51:21 -06:00
Mike Hunhoff 253d70efac vmray: add comments 2024-07-12 18:49:08 -06:00
Mike Hunhoff 85632f698f vmray: clean up models 2024-07-12 18:45:53 -06:00
Mike Hunhoff 931a9b9421 vmray: clean up models 2024-07-12 18:44:29 -06:00
Mike Hunhoff 06631fc39d vmray: remove call feature extraction for out parameters 2024-07-12 18:42:42 -06:00
Mike Hunhoff 4bbe9e1ce9 vmray: emit number and string call features for pointer dereference 2024-07-12 18:35:50 -06:00
Mike Hunhoff e2f5eb7d30 vmray: clean up models 2024-07-12 16:43:48 -06:00
Mike Hunhoff 5b7a0cad5f vmray: emit number call features for output parameters 2024-07-12 16:36:28 -06:00
Mike Hunhoff da0545780b vmray: emit number call features for input parameters 2024-07-12 16:25:56 -06:00
Mike Hunhoff bcdaa80dfa vmray: emit file import features 2024-07-12 13:34:30 -06:00
Mike Hunhoff aad4854a61 vmray: use process OS PID instead of monitor ID 2024-07-12 11:33:13 -06:00
Mike Hunhoff cbf6ecbd4d Merge branch 'vmray-extractor' of github.com:mandiant/capa into vmray-extractor 2024-07-12 10:15:40 -06:00
Mike Hunhoff 81581fe85e vmray: emit string file featureS 2024-07-12 10:15:28 -06:00
Mike Hunhoff 194017bce3 vmray: merge upstream 2024-07-12 09:27:49 -06:00
Mike Hunhoff 9be35f9a8d vmray: remove unneeded unpacking 2024-06-20 15:19:55 -06:00
Mike Hunhoff ec6c9c93bd vmray: remove unused fields from summary_v2 pydantic models 2024-06-20 14:42:42 -06:00
Mike Hunhoff 9df611ff13 vmray: add comments 2024-06-20 14:41:50 -06:00
Mike Hunhoff 29fa3153b1 vmray: fix deptry lints 2024-06-20 14:17:42 -06:00