William Ballenthin
f99fe8aacb
re-add missing pyinstaller spec
2020-07-07 12:32:39 -06:00
William Ballenthin
56b9462d01
git hooks: fix references to tox config
2020-07-07 12:30:54 -06:00
William Ballenthin
d55e1cd16b
pep8
2020-07-07 12:29:17 -06:00
William Ballenthin
22d0f94cea
move ci files to .github directory
...
since this is where we host everything
closes #113
2020-07-07 12:28:47 -06:00
Willi Ballenthin
7b86a968d5
Merge pull request #119 from fireeye/ana-fix-description
...
Fix description
2020-07-07 11:19:56 -06:00
Moritz
e793d6e236
Merge pull request #107 from fireeye/ana-remove-args
...
Remove args from Features
2020-07-07 19:00:58 +02:00
Ana María Martínez Gómez
3acfc413bf
Merge pull request #118 from fireeye/ana-fix-style
2020-07-07 19:00:04 +02:00
Ana María Martínez Gómez
6dacab9848
Fix description
...
```
s = 'number: 4 = I am a description with an = yes'
s.rpartition(' = ') => ('4 = I am a description with an', ' = ', 'yes')
s.partition(' = ') => ('4', ' = ', 'I am a description with an = yes')
s.split(' = ', 1) => ['4', 'I am a description with an = yes']
```
2020-07-07 18:54:36 +02:00
Ana María Martínez Gómez
3dc3e083a9
Remove args from Features
...
`args` and `value` are a duplication for most of the features:
`args = [value]`
get rid of `args` and introduce `value` for `Feature` (the main class
instead of the subclasses). This makes the code simpler.
Refactoring the `freeze_serialize` function to not use an array would
simplify the code a bit more, but that needs a bit more of work.
2020-07-07 18:06:30 +02:00
Willi Ballenthin
758ee87fa1
Merge pull request #114 from fireeye/contributing-guide
...
#28 contributing guide
2020-07-07 09:06:52 -06:00
Willi Ballenthin
bf049f5db3
contributing: remove atom cruft
2020-07-07 09:06:39 -06:00
Willi Ballenthin
e331b56e7d
contributing: remove atom cruft
2020-07-07 09:05:05 -06:00
Ana María Martínez Gómez
a6ddd044c7
Fix style offenses
...
pycodestyle is failing in master.
2020-07-07 15:50:09 +02:00
Moritz
4f61836d45
Merge pull request #116 from fireeye/fix-111
...
fix #111
2020-07-07 15:04:30 +02:00
Moritz
f35263fa86
Merge pull request #115 from fireeye/fix-102
...
#102 #87
2020-07-07 15:02:11 +02:00
Willi Ballenthin
489065bfc1
Merge pull request #117 from fireeye/capa-explorer-code-cleanup
...
capa explorer: code maintenance
2020-07-07 00:03:41 -06:00
Michael Hunhoff
bb94dd4fe8
minor formatting changes
2020-07-06 21:20:12 -06:00
Michael Hunhoff
f0add144b1
merging upstream
2020-07-06 21:07:15 -06:00
Michael Hunhoff
c68dc3bf02
IDA code maintenance
2020-07-06 21:01:26 -06:00
William Ballenthin
b88e97fd95
render: show abs path of rules directory
2020-07-06 17:12:11 -06:00
William Ballenthin
6344d08e6b
pep8
2020-07-06 17:09:13 -06:00
William Ballenthin
091f1d0c41
render: show rules path
...
closes #111
2020-07-06 17:08:55 -06:00
William Ballenthin
248c27c9e8
pep8
2020-07-06 16:54:52 -06:00
William Ballenthin
ca175f02c7
rules: factor out DESCRIPTION_SEPARATOR into a constant
...
closes #87
2020-07-06 16:54:40 -06:00
William Ballenthin
959b66b26a
rules: use rpartition instead of split(..., 1) to better express intent
2020-07-06 16:50:47 -06:00
William Ballenthin
0fe8c9352e
rules: use six.string_types to better support py2
2020-07-06 16:50:18 -06:00
William Ballenthin
d15f6ae0c9
offset: use description
...
closes #102
2020-07-06 16:49:19 -06:00
William Ballenthin
93dfb4fd17
contributing: wording
2020-07-06 16:17:16 -06:00
William Ballenthin
4db45e5c33
contributing: formatting
2020-07-06 15:49:34 -06:00
William Ballenthin
2968004bfb
add contributing guide
2020-07-06 15:46:32 -06:00
William Ballenthin
234fa2aff4
add COC derived from Atom
2020-07-06 14:51:08 -06:00
Moritz
5c2cc380bb
Merge pull request #112 from fireeye/fix/reduce-nzxor-fps
...
increase stack cookie byte delta
2020-07-06 22:26:56 +02:00
Moritz Raabe
55de5061ea
increase stack cookie byte delta
2020-07-06 22:25:51 +02:00
Willi Ballenthin
ea39379ec8
installation: list development setup
2020-07-06 14:21:57 -06:00
Willi Ballenthin
86bf376b19
readme: add links to further information
2020-07-06 14:15:40 -06:00
Willi Ballenthin
7c652f7737
Merge pull request #105 from fireeye/output-feature-count
...
Output feature count
2020-07-06 14:09:47 -06:00
William Ballenthin
ecba9986fc
pep8
2020-07-06 14:07:02 -06:00
William Ballenthin
ec4fa4c199
main: don't log expected non-rule files
2020-07-06 14:06:37 -06:00
William Ballenthin
484179c042
render: move capabilities by function to its own standalone script
2020-07-06 14:06:06 -06:00
William Ballenthin
845938d4e6
scripts: show-features: add doc
2020-07-06 13:48:30 -06:00
Willi Ballenthin
b32575f6b9
Merge pull request #104 from fireeye/simplify-metadata-rendering
...
render: simplify metadata display
2020-07-06 13:27:50 -06:00
Willi Ballenthin
758c5dde3c
Merge pull request #110 from fireeye/fix/lint-windows-paths
...
account for Windows paths
2020-07-06 07:38:19 -06:00
Willi Ballenthin
7ee7b143e0
Merge pull request #109 from fireeye/set-rule-scopes
...
set rule scopes
2020-07-06 07:36:41 -06:00
Moritz Raabe
9e0d2ffd7b
account for Windows paths
2020-07-06 13:00:28 +02:00
Moritz Raabe
50d82f98ad
after #83 all basic block features are also function scope features
2020-07-06 12:38:39 +02:00
Moritz
4f6bf0675c
Merge pull request #90 from fireeye/ana-doc-dev
...
Document how to install development dependencies
2020-07-06 11:34:24 +02:00
Moritz
4b5ab6647f
Merge pull request #89 from fireeye/ana-type-comment
...
Fix misplaced type annotation
2020-07-06 11:33:26 +02:00
Ana María Martínez Gómez
6a9842f44f
Fix misplaced type annotation
...
A misplaced type annotation in `capa/main.py` causes that black fails to
solve offenses in this file. It may also make capa fail in newer Python
versions. Replace type by `schema` as we don't use type checker tools.
2020-07-06 08:28:24 +02:00
William Ballenthin
a5c3080829
pep8
2020-07-03 21:03:09 -06:00
William Ballenthin
b716fb6980
meta: store feature counts in doc.meta.analysis.feature_counts
2020-07-03 21:02:55 -06:00
