Michael Hunhoff
8a6a41583a
adding support for capa doc meta
2020-07-02 17:46:13 -06:00
Willi Ballenthin
60f072f025
readme: update download text
2020-07-02 16:40:30 -06:00
Willi Ballenthin
e14af6a30a
readme: update download text
2020-07-02 16:37:51 -06:00
Willi Ballenthin
9a67cccebb
Merge pull request #81 from fireeye/render-metadata
...
render: report header and metadata
2020-07-02 16:33:32 -06:00
William Ballenthin
959abf9609
pep8
2020-07-02 16:31:48 -06:00
William Ballenthin
1ad8cefd0f
render: ida: move collect_metadata into capa.ida.helpers
2020-07-02 16:31:21 -06:00
William Ballenthin
e13b5c77c6
render: ida: add sha256, filetype
2020-07-02 16:26:55 -06:00
William Ballenthin
ff44801e5c
render: meta: add base address
2020-07-02 16:24:37 -06:00
Willi Ballenthin
b49c0ac8d9
Merge pull request #82 from fireeye/fix/string-with-int-val
...
ensure string feature values are strings, tests
2020-07-02 16:00:09 -06:00
Willi Ballenthin
0c4d96d9b9
Merge pull request #80 from fireeye/capa-explorer-support-feature-description
...
capa explorer: adding support for capa doc description field
2020-07-02 15:45:18 -06:00
Moritz Raabe
8b5f58bf31
ensure string feature values are strings, tests
2020-07-02 23:44:39 +02:00
Willi Ballenthin
96073f876a
Merge pull request #79 from fireeye/fix/verify-scope
...
only allow supported scopes
2020-07-02 15:43:47 -06:00
William Ballenthin
2676649342
pep8
2020-07-02 15:31:47 -06:00
William Ballenthin
6575a019c3
render: add report header and metadata
...
closes #45
2020-07-02 15:31:08 -06:00
Michael Hunhoff
4e5b83c3ed
adding support for description field; bug fix for limit to current function checkbox
2020-07-02 15:15:35 -06:00
Moritz Raabe
8708d254a2
only allow supported scopes
2020-07-02 22:26:18 +02:00
William Ballenthin
2fd59f0674
setup: add pytest tweaks to dev deps
2020-07-02 12:18:03 -06:00
William Ballenthin
cff7e9195a
pep8
2020-07-02 12:17:53 -06:00
William Ballenthin
482bb44876
main: collect metadata for inclusion in json document
...
closes #45
2020-07-02 12:17:09 -06:00
Willi Ballenthin
af06f4d815
Merge pull request #67 from fireeye/fmt-black
...
reformat all python code using `black`
2020-07-02 11:14:26 -06:00
William Ballenthin
612eefe2e8
dos2unix
2020-07-02 11:08:21 -06:00
William Ballenthin
8f7cb6dad0
pep8
2020-07-02 11:01:18 -06:00
Willi Ballenthin
6f44d59eae
Merge pull request #77 from fireeye/fix/rendervv
...
fix render, cleanup feature string display
2020-07-02 11:00:57 -06:00
William Ballenthin
41c32013bb
Merge branch 'master' into fmt-black
2020-07-02 11:00:14 -06:00
William Ballenthin
c6ac997a8d
setup: add formatting deps
2020-07-02 10:53:37 -06:00
William Ballenthin
1188103d1c
pep8: isort
2020-07-02 10:52:05 -06:00
Moritz Raabe
c37365f045
fix render, cleanup feature string display
2020-07-02 18:48:14 +02:00
William Ballenthin
5fda3c467f
tests: fix freeze test that was broken during merge
2020-07-02 10:40:16 -06:00
William Ballenthin
c185e9ef09
pep8: black
2020-07-02 10:32:26 -06:00
William Ballenthin
db2b1caeae
Merge branch 'master' into fmt-black
2020-07-02 10:25:24 -06:00
William Ballenthin
acbcd0c4b0
submodule: rules: update
2020-07-02 10:17:44 -06:00
Willi Ballenthin
e3aea925cc
Merge pull request #71 from fireeye/pyinstaller
...
pyinstaller working on linux/py2
2020-07-02 10:13:46 -06:00
Ana María Martínez Gómez
f6b54beb02
Merge pull request #39 from fireeye/ana-description
2020-07-02 17:07:04 +02:00
Ana María Martínez Gómez
152129cc25
Add tests for description feature
...
Test if the parsing of feature succeeds with every time of description.
2020-07-02 16:50:28 +02:00
Ana María Martínez Gómez
81741b49f7
Support inline descriptions for count
...
```
count(number(2 = AF_INET/SOCK_DGRAM)): 2
```
2020-07-02 16:50:22 +02:00
Ana María Martínez Gómez
64124c0b64
Remove True from Characteristic rules and output
...
Get rid of `True` in characteristic (rules, output and json) as it is
implicit. This way, the same syntax is used for characteristic as for
the rest of the features.
Co-authored-by: William Ballenthin <william.ballenthin@fireeye.com >
2020-07-02 16:50:15 +02:00
Ana María Martínez Gómez
681feebf35
Adapt description implementation to new output
...
As the `__str__` method is not used anymore in the output, the
description implementation needs to be adapted.
2020-07-02 16:50:07 +02:00
Ana María Martínez Gómez
767a76d814
Allow to add a description for every feature
...
Enable associate context for all features. This was called symbol before
and only enabled for `number`, `offset` and `bytes`.
This is not enabled for strings with regular expressions, as they are
not a feature.
2020-07-02 11:31:31 +02:00
Moritz
12671ea44b
Merge pull request #73 from fireeye/ana-fix-tests
...
Fix KeyError in Range#evaluate()
2020-07-02 11:30:42 +02:00
Ana María Martínez Gómez
f8cfb67d02
Fix KeyError in Range#evaluate()
...
If the key doesn't exist, `evaluate` raises a `KeyError` Exception,
making the tests fail.
2020-07-02 11:28:47 +02:00
Moritz
aac5ac71d2
Merge pull request #72 from fireeye/ana-linter-namespace
...
Fix get_features rule linter
2020-07-02 10:20:30 +02:00
William Ballenthin
d2ab09db5d
pyinstaller: embed capa version in exe
2020-07-02 01:38:06 -06:00
William Ballenthin
d0e962f9d0
pyinstaller: add wcwidth data files
2020-07-02 01:27:07 -06:00
Ana María Martínez Gómez
a80f38ec75
Fix get_features rule linter
...
To support matching namespaces `get_features()` get an extra parameters
which was missing in the rule linter.
2020-07-02 09:24:51 +02:00
William Ballenthin
36afed2d22
pyinstaller working on linux/py2
...
closes #40
2020-07-01 17:35:18 -06:00
Willi Ballenthin
8f6396c526
Merge pull request #69 from fireeye/capa-explorer-add-submodule-item-type
...
capa explorer: add subscope item type
2020-07-01 14:34:04 -06:00
Willi Ballenthin
bcd68b14b9
Merge pull request #70 from fireeye/capa-explorer-default-sort-order-for-reset
...
capa explorer: default sort asc when reset occurs
2020-07-01 14:33:21 -06:00
Willi Ballenthin
b31cad551c
Merge pull request #68 from fireeye/capa-explorer-support-multiple-range-locations
...
capa explorer: adding support for multiple locations under range
2020-07-01 14:32:50 -06:00
Michael Hunhoff
28ac48dd17
add default sort order asc when reset occurs
2020-07-01 13:54:00 -06:00
Michael Hunhoff
1cf36b5792
adding new item type for subscope to help render
2020-07-01 13:38:20 -06:00
