tests: add feature tests for #246

This commit is contained in:
William Ballenthin
2020-08-31 16:59:55 -06:00
parent 2bd0c03f70
commit 5b349c1df8

View File

@@ -281,6 +281,8 @@ FEATURE_PRESENCE_TESTS = [
("mimikatz", "file", capa.features.file.Import("#11"), False),
("mimikatz", "file", capa.features.file.Import("#nope"), False),
("mimikatz", "file", capa.features.file.Import("nope"), False),
("mimikatz", "file", capa.features.file.Import("advapi32.CryptAcquireContextW"), True),
("mimikatz", "file", capa.features.file.Import("advapi32.CryptAcquireContext"), True),
# function/characteristic(loop)
("mimikatz", "function=0x401517", capa.features.Characteristic("loop"), True),
("mimikatz", "function=0x401000", capa.features.Characteristic("loop"), False),