William Ballenthin
|
6482f67a0c
|
elf: document unused OS constants
|
2021-08-23 16:06:14 -06:00 |
|
William Ballenthin
|
a1bf95ec2c
|
features: formatting of OS constants
|
2021-08-23 16:00:57 -06:00 |
|
William Ballenthin
|
6961fde327
|
Merge branch 'feature-701' of github.com:fireeye/capa into feature-701
|
2021-08-23 15:59:09 -06:00 |
|
William Ballenthin
|
c0fe0420fc
|
changelog: tweak PR ref
|
2021-08-23 15:58:32 -06:00 |
|
Willi Ballenthin
|
2ba000a987
|
Merge branch 'master' into feature-701
|
2021-08-23 10:02:41 -06:00 |
|
Willi Ballenthin
|
a90e93e150
|
Update capa/main.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2021-08-23 08:54:43 -06:00 |
|
Willi Ballenthin
|
b6ab12d3c1
|
Update capa/features/common.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
|
2021-08-23 08:54:22 -06:00 |
|
dependabot[bot]
|
71ccd87435
|
build(deps): bump networkx from 2.5.1 to 2.6.2
Bumps [networkx](https://github.com/networkx/networkx) from 2.5.1 to 2.6.2.
- [Release notes](https://github.com/networkx/networkx/releases)
- [Commits](https://github.com/networkx/networkx/compare/networkx-2.5.1...networkx-2.6.2)
---
updated-dependencies:
- dependency-name: networkx
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-08-23 14:24:19 +00:00 |
|
Willi Ballenthin
|
d07045f134
|
Merge pull request #731 from fireeye/dependabot/pip/vivisect-1.0.4
build(deps): bump vivisect from 1.0.3 to 1.0.4
|
2021-08-23 08:23:36 -06:00 |
|
dependabot[bot]
|
bede4a0aa1
|
build(deps): bump vivisect from 1.0.3 to 1.0.4
Bumps [vivisect](https://github.com/vivisect/vivisect) from 1.0.3 to 1.0.4.
- [Release notes](https://github.com/vivisect/vivisect/releases)
- [Changelog](https://github.com/vivisect/vivisect/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/vivisect/vivisect/compare/v1.0.3...v1.0.4)
---
updated-dependencies:
- dependency-name: vivisect
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-08-23 14:22:20 +00:00 |
|
Willi Ballenthin
|
de1cff356a
|
Merge pull request #733 from fireeye/dependabot/pip/tqdm-4.62.2
build(deps): bump tqdm from 4.62.1 to 4.62.2
|
2021-08-23 08:21:56 -06:00 |
|
Willi Ballenthin
|
1bee098fb6
|
Merge pull request #734 from fireeye/dependabot/pip/smda-1.6.2
build(deps): bump smda from 1.5.19 to 1.6.2
|
2021-08-23 08:21:00 -06:00 |
|
dependabot[bot]
|
e36e175e08
|
build(deps): bump smda from 1.5.19 to 1.6.2
Bumps [smda](https://github.com/danielplohmann/smda) from 1.5.19 to 1.6.2.
- [Release notes](https://github.com/danielplohmann/smda/releases)
- [Commits](https://github.com/danielplohmann/smda/commits)
---
updated-dependencies:
- dependency-name: smda
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-08-23 14:20:55 +00:00 |
|
Willi Ballenthin
|
9db45d2fcb
|
Merge pull request #732 from fireeye/dependabot/pip/ruamel-yaml-0.17.13
build(deps): bump ruamel-yaml from 0.17.10 to 0.17.13
|
2021-08-23 08:20:07 -06:00 |
|
dependabot[bot]
|
558f5d0c8a
|
build(deps): bump tqdm from 4.62.1 to 4.62.2
Bumps [tqdm](https://github.com/tqdm/tqdm) from 4.62.1 to 4.62.2.
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](https://github.com/tqdm/tqdm/compare/v4.62.1...v4.62.2)
---
updated-dependencies:
- dependency-name: tqdm
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-08-23 14:02:36 +00:00 |
|
dependabot[bot]
|
e32a887091
|
build(deps): bump ruamel-yaml from 0.17.10 to 0.17.13
Bumps [ruamel-yaml](https://sourceforge.net/p/ruamel-yaml/code/ci/default/tree) from 0.17.10 to 0.17.13.
---
updated-dependencies:
- dependency-name: ruamel-yaml
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2021-08-23 14:02:32 +00:00 |
|
William Ballenthin
|
1b9a6c3c59
|
main: collect os/format/arch into metadata and render it
|
2021-08-20 16:50:40 -06:00 |
|
William Ballenthin
|
aef03b5592
|
elf: fix type error caught by mypy!
|
2021-08-20 15:00:06 -06:00 |
|
William Ballenthin
|
3eaeb533e9
|
Merge branch 'feature-701' of github.com:fireeye/capa into feature-701
|
2021-08-20 14:56:53 -06:00 |
|
William Ballenthin
|
04cc94a450
|
main: detect invalid arch and os
|
2021-08-20 14:56:26 -06:00 |
|
Willi Ballenthin
|
dae7be076d
|
elf: fix alignment calculation
identified over [here](14f9c972b3 (r692441396))
|
2021-08-19 14:45:08 -06:00 |
|
Michael Hunhoff
|
3cb7573edb
|
enable os/arch/format for capa explorer
|
2021-08-19 13:06:43 -06:00 |
|
William Ballenthin
|
a96a5de12d
|
tests: re-enable SMDA ELF API tests
|
2021-08-19 08:02:17 -06:00 |
|
William Ballenthin
|
45b6c8dad3
|
setup: bump SMDA dep ver
closes #725
|
2021-08-19 08:01:17 -06:00 |
|
William Ballenthin
|
cf17ebac33
|
Merge branch 'feature-701' of github.com:fireeye/capa into feature-701
|
2021-08-18 16:33:21 -06:00 |
|
William Ballenthin
|
f0a34fdb5e
|
merge
|
2021-08-18 16:32:58 -06:00 |
|
Willi Ballenthin
|
e124115e8d
|
Merge branch 'master' into feature-701
|
2021-08-18 16:29:05 -06:00 |
|
William Ballenthin
|
249b8498d9
|
pefile: extract Arch
|
2021-08-18 16:27:41 -06:00 |
|
Capa Bot
|
15c69e3b7d
|
Sync capa rules submodule
|
2021-08-18 21:15:01 +00:00 |
|
Capa Bot
|
98208b8eec
|
Sync capa rules submodule
|
2021-08-18 20:50:11 +00:00 |
|
Capa Bot
|
0690e73320
|
Sync capa rules submodule
|
2021-08-18 20:38:06 +00:00 |
|
William Ballenthin
|
766ac7e500
|
Merge branch 'master' of github.com:fireeye/capa into feature-701
|
2021-08-18 14:33:17 -06:00 |
|
Capa Bot
|
51ac57c657
|
Sync capa-testfiles submodule
|
2021-08-18 20:33:02 +00:00 |
|
William Ballenthin
|
89603586da
|
elf: add some doc
|
2021-08-18 14:23:48 -06:00 |
|
William Ballenthin
|
a35f5a1650
|
elf: detect FreeBSD via note
|
2021-08-18 14:21:50 -06:00 |
|
William Ballenthin
|
f1df29d27e
|
tests: xfail smda ELF API
waiting for #725
|
2021-08-18 14:08:36 -06:00 |
|
Willi Ballenthin
|
08c24e2705
|
Merge pull request #729 from doomedraven/patch-1
update capa_as_library for capa v2
|
2021-08-18 08:32:41 -06:00 |
|
doomedraven
|
b1171864e3
|
black
|
2021-08-18 14:25:58 +02:00 |
|
doomedraven
|
5af59cecda
|
update capa_as_library for capa v2
|
2021-08-18 14:23:36 +02:00 |
|
William Ballenthin
|
0c3a38b24b
|
Merge branch 'feature-701' of github.com:fireeye/capa into feature-701
|
2021-08-17 09:07:25 -06:00 |
|
William Ballenthin
|
ac5d163aa0
|
pep8
|
2021-08-17 09:07:08 -06:00 |
|
Willi Ballenthin
|
dfe2dbea6d
|
Merge pull request #722 from fireeye/fix-703
fix reporting of namespace matches
|
2021-08-17 09:05:19 -06:00 |
|
Willi Ballenthin
|
909ffc187b
|
Merge branch 'master' into feature-701
|
2021-08-17 09:00:48 -06:00 |
|
William Ballenthin
|
92dfa99059
|
extractors: log unsupported os/arch/format but don't except
|
2021-08-17 08:57:42 -06:00 |
|
William Ballenthin
|
0065876702
|
extractors: ida: move os extraction to global module
|
2021-08-17 08:57:27 -06:00 |
|
Capa Bot
|
23bf28702f
|
Sync capa rules submodule
|
2021-08-17 14:23:23 +00:00 |
|
Capa Bot
|
066873bd06
|
Sync capa rules submodule
|
2021-08-17 14:20:34 +00:00 |
|
William Ballenthin
|
98c00bd8b1
|
extractors: add missing global_.py files
|
2021-08-16 17:12:45 -06:00 |
|
William Ballenthin
|
fd47b03fac
|
render: vverbose: don't render locations of global scope features
|
2021-08-16 17:12:28 -06:00 |
|
William Ballenthin
|
8e689c39f4
|
features: add Arch feature at global scope
|
2021-08-16 17:06:56 -06:00 |
|