Aayush Goel
62db346b49
Style , mypy checks
2023-07-06 05:28:13 +05:30
Yacine Elhamer
47aebcbdd4
fix show-capabilities-by-function
2023-07-06 00:48:22 +01:00
Aayush Goel
c0d712acea
Changes os.path to pathlib.Path usage
...
changed args.rules , args.signatures types in handle_common_args.
2023-07-06 05:12:50 +05:30
Willi Ballenthin
23ed0a5d9d
main: don't leave behind traces of the progress bar
2023-07-05 19:06:33 +02:00
Willi Ballenthin
694143ce6b
import-to-ida: use Metadata type not json document
2023-07-05 18:24:37 +02:00
Willi Ballenthin
19a5ef8a64
import-to-ida: use existing result document json parser
2023-07-05 18:21:03 +02:00
Willi Ballenthin
169b3d60a8
import-to-ida: update to use v5 JSON format
...
closes #1584
2023-07-05 18:04:15 +02:00
Willi Ballenthin
bb053561ef
import-to-ida: decode MD5 to hex
2023-07-05 18:03:57 +02:00
mr-tz
1a2e034ee0
update data via script
2023-07-05 12:30:54 +02:00
Yacine Elhamer
06aea6b97c
fix mypy and codestyle issues
2023-06-27 11:32:21 +01:00
Willi Ballenthin
81d35eb645
Merge branch 'dynamic-feature-extraction' into static-extractor
2023-06-27 09:42:16 +02:00
Yacine Elhamer
b172f9a354
FeatureExtractor alias: fix mypy typing issues by adding ininstance-based assert statements
2023-06-26 22:46:27 +01:00
Yacine Elhamer
63e4d3d5eb
fix TypeAlias importing: import from typing_extensions to support Python 3.9 and lower
2023-06-26 21:14:17 +01:00
Yacine Elhamer
c74c8871f8
scripts: add type-related assert statements
2023-06-26 21:06:35 +01:00
Yacine Elhamer
aff0c6b49b
show-featurex.py: bugfix in ida_main()
2023-06-26 09:41:14 +01:00
Yacine Elhamer
417bb42ac8
show_features.py: rename show_{function,process}_features to show_{static,dynamic}_features.py
2023-06-26 09:16:59 +01:00
Yacine Elhamer
94fc7b4e9a
FeatureExtractor alias: add type casts to either StaticFeatureExtractor or DynamicFeatureExtractor
2023-06-26 01:23:01 +01:00
Yacine Elhamer
5f6aade92b
get_format_from_report(): fix bugs and add a list of dynamic formats
2023-06-25 00:54:55 +01:00
Yacine Elhamer
0c62a5736e
add support for determining the format of a sandbox report
2023-06-24 23:51:12 +01:00
Yacine Elhamer
f1406c1ffd
scripts/show-features.py: prefix {static,dynamic}_analysis() functions' name with 'print_'
2023-06-23 13:58:34 +01:00
Yacine Elhamer
1cdc3e5232
fix codestyle
2023-06-23 13:48:49 +01:00
Yacine Elhamer
bd9870254e
Apply suggestions from code review: use EXTENSIONS_CAPE, and ident 'thread' by one more space
2023-06-23 13:31:35 +01:00
Yacine Elhamer
0442b8c1e1
Apply suggestions from code review: use is_ for booleans
...
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com >
2023-06-23 13:27:20 +01:00
Yacine Elhamer
9f185ed5c0
remove incompatible bar union syntax
2023-06-22 15:59:23 +01:00
Yacine Elhamer
12d5beec6e
add type cast to fix get_extractor() typing issues
2023-06-22 15:51:56 +01:00
Yacine Elhamer
b77e68df19
fix codestyle and typing
2023-06-22 14:17:06 +01:00
Yacine Elhamer
07c48bca68
scripts/show-features.py: add dynamic feature extraction from cape reports
2023-06-22 13:56:54 +01:00
Yacine Elhamer
45002bd51d
Revert "scripts/show-features.py: add dynamic feature extraction from cape reports"
...
This reverts commit 64189a4d08
2023-06-22 12:29:51 +01:00
Yacine Elhamer
64189a4d08
scripts/show-features.py: add dynamic feature extraction from cape reports
2023-06-22 12:16:31 +01:00
Aayush Goel
b4870b120e
Remove from_capa API for MetaData
2023-06-03 15:33:49 +05:30
Aayush Goel
f03ad2d208
Merge branch 'mandiant:master' into Aayush-Goel-04/Issue#1411
2023-06-02 14:47:24 +05:30
Aayush Goel
445214b23b
Update Metadata type in capa main
2023-06-02 00:40:38 +05:30
Aayush Goel
66ea0451e9
Merge branch 'mandiant:master' into Aayush-Goel-04/Issue#1451
2023-05-18 16:30:08 +05:30
Aayush Goel
275386806d
Add redirect print to capa main
2023-05-17 23:57:52 +05:30
Aayush Goel
807efec40f
Create RuleSet to test overlap script
2023-05-12 22:44:26 +05:30
Aayush Goel
187a4712cb
Update test_scripts.py
...
Here new_rule_path and expected_overlaps will be changed based on the new test rule designed.
Adding tests to check if the code works fine
2023-05-10 20:55:22 +05:30
Aayush Goel
d91070c116
Update detect_duplicate_features.py
2023-05-08 20:17:29 +05:30
Aayush Goel
39d2a70679
Update detect_duplicate_features.py
...
Using get_rules menthod to get set of all existing rules.
2023-05-08 17:29:01 +05:30
Aayush Goel
ec6b6a2266
Update detect_duplicate_features.py
2023-05-08 14:58:30 +05:30
Aayush Goel
9eacf72366
Update detect_duplicate_features.py
...
loading yaml file using capa.rule.Rule.from_yaml.
Returning any exception/errors occuring while checking the files.
2023-05-06 17:36:13 +05:30
Aayush Goel
30516c33b7
Update detect_duplicate_features.py
...
Improved parse routine based on suggestions.
Co-Authored-By: Moritz <mr-tz@users.noreply.github.com >
2023-05-05 15:17:43 +05:30
Aayush Goel
1c558a203d
Update detect_duplicate_features.py
...
Added a main routine and using argparse to retrieve these from the command line
2023-05-03 22:32:22 +05:30
Aayush Goel
09865ccd9b
Fixes Linting Issues
...
Update detect_duplicate_features.py
2023-04-27 06:46:02 +05:30
Aayush Goel
256611bef5
Create detect_duplicate_features.py
...
Fixes #1451
Python script to detect feature overlap between new and existing CAPA rules. Checks if the a feature in new rules exists in an existing rule
2023-04-27 06:00:38 +05:30
Pratham Chauhan
068ac0ca2c
fix black
2023-04-05 16:29:53 +05:30
Pratham Chauhan
eef1548baa
fix capy2yara.py
2023-04-05 16:28:00 +05:30
Willi Ballenthin
80112bac64
add scripts showing conversion to/from protobuf format
2023-03-23 10:58:22 +01:00
Willi Ballenthin
a9ba133506
bulk-process: fix some variable references
2023-03-22 09:48:20 +01:00
Willi Ballenthin
7ef167fcd0
Update scripts/bulk-process.py
...
Co-authored-by: Moritz <mr-tz@users.noreply.github.com >
2023-03-22 09:44:00 +01:00
Willi Ballenthin
c1ca4ab703
isort
2023-03-21 17:22:43 +01:00
