William Ballenthin
|
b5860190e3
|
linter: invoke gc
|
2021-08-27 09:47:34 -06:00 |
|
William Ballenthin
|
f5b2efdc87
|
lint: reduce logging verbosity
|
2021-08-27 09:36:32 -06:00 |
|
William Ballenthin
|
fab26180cb
|
lint: cache analysis results per path
|
2021-08-27 09:24:36 -06:00 |
|
William Ballenthin
|
3968d40bf4
|
linter: use pathlib.Path
|
2021-08-27 09:11:28 -06:00 |
|
William Ballenthin
|
cb2d1cde36
|
linter: add typing
|
2021-08-27 09:04:37 -06:00 |
|
William Ballenthin
|
da7a9b7232
|
linter: don't show noisey "need example" warnings in nursery
|
2021-08-27 08:42:46 -06:00 |
|
William Ballenthin
|
4f15225665
|
lint: handle calls to print within pbar
|
2021-08-27 08:34:02 -06:00 |
|
William Ballenthin
|
90708c123b
|
linter: show progress bar
|
2021-08-27 08:21:09 -06:00 |
|
William Ballenthin
|
8195b7565f
|
lint: hardcoded some exports of ntdll/ntoskrnl to reduce warning spam
|
2021-08-25 16:36:36 -06:00 |
|
William Ballenthin
|
0569f9b242
|
lint: show mod/imp names per rule
fix bug where the same mod/imp name pair was shown for all rules
|
2021-08-25 16:36:08 -06:00 |
|
William Ballenthin
|
33c3c7e106
|
scripts: profile-memory: show vms, too
|
2021-08-24 17:26:45 -06:00 |
|
William Ballenthin
|
5c75f12b78
|
scripts: profile-memory: show incremental duration and RSS
|
2021-08-24 17:22:18 -06:00 |
|
William Ballenthin
|
d8999471c5
|
scripts: add profile-memory
ref #736
|
2021-08-24 17:05:34 -06:00 |
|
William Ballenthin
|
8e757d2099
|
show-features: print function addresses, too
|
2021-08-24 16:32:44 -06:00 |
|
William Ballenthin
|
d8c8c6d2f3
|
lint: apply string lints to substrings, too
|
2021-08-24 11:52:28 -06:00 |
|
William Ballenthin
|
1b9a6c3c59
|
main: collect os/format/arch into metadata and render it
|
2021-08-20 16:50:40 -06:00 |
|
William Ballenthin
|
766ac7e500
|
Merge branch 'master' of github.com:fireeye/capa into feature-701
|
2021-08-18 14:33:17 -06:00 |
|
doomedraven
|
b1171864e3
|
black
|
2021-08-18 14:25:58 +02:00 |
|
doomedraven
|
5af59cecda
|
update capa_as_library for capa v2
|
2021-08-18 14:23:36 +02:00 |
|
William Ballenthin
|
ab1326f858
|
features: move OS and Format to their own features, not characteristics
|
2021-08-16 16:28:26 -06:00 |
|
William Ballenthin
|
34819b289d
|
pep8
|
2021-08-11 15:08:31 -06:00 |
|
William Ballenthin
|
c1910d47f0
|
move is_global_feature into capa.features.common
|
2021-08-11 15:02:10 -06:00 |
|
William Ballenthin
|
769d354792
|
detect-elf-os: remove extra print statement
|
2021-08-11 14:56:01 -06:00 |
|
William Ballenthin
|
294f74b209
|
extractors: viv: extract format and OS at all scopes
|
2021-08-11 14:44:41 -06:00 |
|
William Ballenthin
|
7205862dbf
|
helpers: move ELF and IDA helpers out of script and into common module
|
2021-08-11 14:42:29 -06:00 |
|
William Ballenthin
|
baaa8ba2c1
|
scripts: add script to detect ELF OS
closes #724
|
2021-08-11 13:52:50 -06:00 |
|
Moritz Raabe
|
5c8a4aafd7
|
test scripts and fix show-features
|
2021-06-29 21:16:31 +02:00 |
|
Moritz Raabe
|
4ca9e168fe
|
Merge branch 'master' into fix-630
|
2021-06-28 11:32:27 +02:00 |
|
William Ballenthin
|
40c7401f0a
|
pep8
|
2021-06-15 12:28:45 -06:00 |
|
William Ballenthin
|
a7ebd5a309
|
Merge branch 'master' of github.com:fireeye/capa into fix-507
|
2021-06-15 12:28:17 -06:00 |
|
William Ballenthin
|
7f03db9fe4
|
main: dont save .viv by default, unless CAPA_SAVE_WORKSPACE set
closes #507
|
2021-06-15 12:24:01 -06:00 |
|
William Ballenthin
|
96b9bce93c
|
Merge branch 'master' of github.com:fireeye/capa into fix-630
|
2021-06-15 11:59:25 -06:00 |
|
William Ballenthin
|
48858e114d
|
main: refactor handling of rules, signatures cli arguments
|
2021-06-15 11:54:57 -06:00 |
|
William Ballenthin
|
6f1f928434
|
main: when --signatures provided, override default set
closes #630
|
2021-06-15 11:43:38 -06:00 |
|
William Ballenthin
|
ae2baebf6c
|
import-to-bn: dont import *
|
2021-06-14 11:02:20 -06:00 |
|
William Ballenthin
|
aca6ad2f52
|
scripts: fix types
|
2021-06-14 10:41:44 -06:00 |
|
William Ballenthin
|
83909b2be4
|
*: remove explicit object super class
closes #635
|
2021-06-14 08:47:09 -06:00 |
|
William Ballenthin
|
954ed3a408
|
pep8
|
2021-06-09 22:22:03 -06:00 |
|
William Ballenthin
|
ac59e50b5f
|
move capa/features/__init__.py logic to common.py
also cleanup imports across the board,
thanks to pylance.
|
2021-06-09 22:20:53 -06:00 |
|
William Ballenthin
|
766dcacdbe
|
move logic out of capa/render/__init__.py
|
2021-06-09 18:06:51 -06:00 |
|
William Ballenthin
|
fc9ad6c737
|
move extractors/ida/__init__.py logic to extractor.py
|
2021-06-09 17:55:44 -06:00 |
|
William Ballenthin
|
2706a7171e
|
linter: fix match namespace handling
closes #601
|
2021-06-01 11:38:05 -06:00 |
|
Moritz Raabe
|
204d8b36df
|
add or/optional lint and colors
closes #348
|
2021-05-25 16:32:47 +02:00 |
|
Willi Ballenthin
|
4cada67b21
|
Merge branch 'master' into feature-571
|
2021-05-21 11:14:22 -06:00 |
|
Arnim Rupp
|
7759d2dd79
|
Update capa2yara.py
|
2021-05-21 17:04:16 +02:00 |
|
Arnim Rupp
|
73f121cf03
|
Update capa2yara.py
bugfix: https://github.com/fireeye/capa-rules/blob/master/collection/get-geographical-location.yml hit an far too many files with /\bcity opposed to the intention of the capa rule ti just hit in function names. changed to /\x00city.
|
2021-05-21 16:51:14 +02:00 |
|
Moritz
|
caaeded278
|
Merge pull request #563 from fireeye/ci/lint-statement-children
lint statements for single child statements
|
2021-05-20 10:41:41 +02:00 |
|
Willi Ballenthin
|
dcf4a056ee
|
show-features: skip library functions (#570)
* show-features: skip library functions
closes #569
* changelog
|
2021-05-20 10:34:48 +02:00 |
|
William Ballenthin
|
9b1400c23a
|
pep8
|
2021-05-19 16:14:37 -06:00 |
|
William Ballenthin
|
60d77759f2
|
Merge branch 'feature-571' of github.com:fireeye/capa into feature-571
|
2021-05-19 16:14:09 -06:00 |
|