dependabot[bot]
|
4aea481967
|
build(deps-dev): bump types-pyyaml from 6.0.0 to 6.0.1
Bumps [types-pyyaml](https://github.com/python/typeshed) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/python/typeshed/releases)
- [Commits](https://github.com/python/typeshed/commits)
---
updated-dependencies:
- dependency-name: types-pyyaml
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-11-15 14:12:07 +00:00 |
|
Willi Ballenthin
|
57fe1e27b6
|
Merge pull request #830 from mandiant/perf/rule-selection
perf: don't try to match rules that will never match
|
2021-11-12 11:54:29 -07:00 |
|
Willi Ballenthin
|
83253eb7d0
|
rules: better variable name
|
2021-11-12 11:53:03 -07:00 |
|
Willi Ballenthin
|
9b5e8ff45d
|
Update capa/rules.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2021-11-12 11:51:39 -07:00 |
|
William Ballenthin
|
cdfacc6247
|
Merge branch 'master' of github.com:fireeye/capa into perf/rule-selection
|
2021-11-10 14:30:08 -07:00 |
|
Capa Bot
|
10d747cc8c
|
Sync capa rules submodule
|
2021-11-10 21:29:25 +00:00 |
|
William Ballenthin
|
a6b366602c
|
mypy
|
2021-11-10 14:21:28 -07:00 |
|
William Ballenthin
|
80fb9dec3c
|
pep8
|
2021-11-10 14:15:52 -07:00 |
|
William Ballenthin
|
68c86cf620
|
rules: easy/hard: better detect edge cases in optional, some, and range
|
2021-11-10 14:13:57 -07:00 |
|
William Ballenthin
|
e550d48bcd
|
linter: optional maps to some, not range
|
2021-11-10 14:13:37 -07:00 |
|
William Ballenthin
|
1aaaa8919c
|
rules: easy/hard: simplify indexing by considering not: hard
|
2021-11-10 13:55:34 -07:00 |
|
William Ballenthin
|
72c2ffc40b
|
linter: add checks for not and optional not under and
|
2021-11-10 13:47:30 -07:00 |
|
William Ballenthin
|
f7ab2fb13a
|
rules: easy/hard rules: detect not/optional at the root
|
2021-11-10 13:36:10 -07:00 |
|
William Ballenthin
|
3a1272246f
|
rules: code consistency
|
2021-11-10 13:36:00 -07:00 |
|
William Ballenthin
|
6039a33bf8
|
engine: remove old import
|
2021-11-10 12:56:40 -07:00 |
|
William Ballenthin
|
2d68fb2536
|
pep8
|
2021-11-10 12:51:27 -07:00 |
|
William Ballenthin
|
845df282ef
|
tests: split out match tests and validate alternative algorithms
|
2021-11-10 12:44:58 -07:00 |
|
William Ballenthin
|
1406dc28d9
|
rules: ruleset: fix collection of features under not statements
|
2021-11-10 12:44:19 -07:00 |
|
William Ballenthin
|
67884dd255
|
rules: match: more documentation
|
2021-11-09 16:42:32 -07:00 |
|
William Ballenthin
|
2bf05ac631
|
rules: index easy/hard: better handle not: statements
|
2021-11-09 16:37:30 -07:00 |
|
William Ballenthin
|
8cb04e4737
|
Merge branch 'master' into perf/rule-selection
|
2021-11-09 16:28:03 -07:00 |
|
William Ballenthin
|
733126591e
|
Merge branch 'perf/query-optimizer'
|
2021-11-09 16:27:09 -07:00 |
|
William Ballenthin
|
d4d801c246
|
optimizer: tweak costs slightly
|
2021-11-09 16:26:26 -07:00 |
|
Willi Ballenthin
|
84ba32a8fe
|
Merge pull request #829 from mandiant/perf/query-optimizer
perf: add query optimizer
|
2021-11-09 16:25:22 -07:00 |
|
William Ballenthin
|
ea386d02b6
|
tests: add test demonstrating optimizer
|
2021-11-09 16:24:26 -07:00 |
|
William Ballenthin
|
77cac63443
|
Merge branch 'master' into perf/query-optimizer
|
2021-11-09 16:12:30 -07:00 |
|
Willi Ballenthin
|
9350ee9479
|
Merge pull request #827 from mandiant/perf/short-circuit
perf: short circuit logic nodes when appropriate
|
2021-11-09 16:10:20 -07:00 |
|
Willi Ballenthin
|
025d156068
|
Merge pull request #828 from mandiant/profiling
profile infrastructure
|
2021-11-09 16:09:34 -07:00 |
|
William Ballenthin
|
7a4aee592b
|
profile-time: add doc
|
2021-11-09 16:08:39 -07:00 |
|
Willi Ballenthin
|
f427c5e961
|
Update capa/engine.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2021-11-09 10:49:10 -07:00 |
|
Willi Ballenthin
|
51af2d4a56
|
Update capa/engine.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2021-11-09 10:49:01 -07:00 |
|
Willi Ballenthin
|
a68812b223
|
Update capa/engine.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2021-11-09 10:48:54 -07:00 |
|
William Ballenthin
|
e05f8c7034
|
changelog
|
2021-11-09 10:27:33 -07:00 |
|
William Ballenthin
|
182377581a
|
main: use ruleset.match instead of engine.mathc
|
2021-11-09 09:52:45 -07:00 |
|
William Ballenthin
|
e647ae2ac4
|
rules: ruleset: add optimized match routine
|
2021-11-09 09:52:32 -07:00 |
|
William Ballenthin
|
1311da99ff
|
rules: make Scope an enum
|
2021-11-09 09:51:50 -07:00 |
|
William Ballenthin
|
8badf226a2
|
engine: document match routine
|
2021-11-09 09:51:18 -07:00 |
|
William Ballenthin
|
6909d6a541
|
changelog
|
2021-11-08 16:04:15 -07:00 |
|
William Ballenthin
|
e287dc9a32
|
optimizer: fix sort order
|
2021-11-08 15:54:14 -07:00 |
|
William Ballenthin
|
152d0f3244
|
ruleset: add query optimizer
|
2021-11-08 15:34:59 -07:00 |
|
William Ballenthin
|
a6e2cfc90a
|
Merge branch 'profiling' into perf/short-circuit
|
2021-11-08 15:24:50 -07:00 |
|
William Ballenthin
|
18c30e4f12
|
main: remove perf debug msgs
|
2021-11-08 15:24:43 -07:00 |
|
William Ballenthin
|
3c4f4d302c
|
Merge branch 'profiling' into perf/short-circuit
|
2021-11-08 15:23:23 -07:00 |
|
William Ballenthin
|
2abebfbce7
|
main: remove perf messages
|
2021-11-08 15:22:58 -07:00 |
|
William Ballenthin
|
0b517c51d8
|
main: remove perf messages
|
2021-11-08 15:22:01 -07:00 |
|
William Ballenthin
|
9fbbda11b8
|
Merge branch 'profiling' into perf/short-circuit
|
2021-11-08 15:20:22 -07:00 |
|
William Ballenthin
|
6f6831f812
|
perf: document that counters is unstable
|
2021-11-08 15:20:11 -07:00 |
|
William Ballenthin
|
d425bb31c4
|
Merge branch 'profiling' into perf/short-circuit
|
2021-11-08 15:16:22 -07:00 |
|
William Ballenthin
|
334425a08f
|
changelog
|
2021-11-08 15:16:08 -07:00 |
|
William Ballenthin
|
3e74da96a6
|
engine: make short circuiting configurable
|
2021-11-08 14:55:11 -07:00 |
|