gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2026-01-17 15:22:53 -08:00
Code Issues Packages Projects Releases Wiki Activity

render: add examples of output

Browse Source
This commit is contained in:
William Ballenthin
2020-06-27 18:21:22 -06:00
parent 4479b9da96
commit bee29e4d3d
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
capa/render/default.py
View File

@@ -7,6 +7,17 @@ import capa.render.utils as rutils
def render_capabilities(doc, ostream):
"""
example::
+-------------------------------------------------------+-------------------------------------------------+
| CAPABILITY | NAMESPACE |
|-------------------------------------------------------+-------------------------------------------------|
| check for OutputDebugString error | anti-analysis/anti-debugging/debugger-detection |
| read and send data from client to server | c2/file-transfer |
| ... | ... |
+-------------------------------------------------------+-------------------------------------------------+
"""
rows = []
for rule in rutils.capability_rules(doc):
rows.append((rutils.bold(rule['meta']['name']), rule['meta']['namespace']))
@@ -16,6 +27,17 @@ def render_capabilities(doc, ostream):
def render_attack(doc, ostream):
"""
example::
+----------------------------------------------------------------------+
| ATT&CK tactic: EXECUTION |
|----------------------------------------------------------------------|
| Command and Scripting Interpreter::Windows Command Shell [T1059.003] |
| Shared Modules [T1129] |
| ... |
+----------------------------------------------------------------------+
"""
tactics = collections.defaultdict(set)
for rule in rutils.capability_rules(doc):
if not rule['meta'].get('att&ck'):