Commit Graph

3433 Commits

Author SHA1 Message Date
William Ballenthin
1ea9b6e1e8 render: implement default renderer 2020-06-27 09:05:43 -06:00
William Ballenthin
135329ed1d pep8 2020-06-27 08:06:13 -06:00
William Ballenthin
d3b02a0b4d render: splice in results for match statements 2020-06-27 08:04:35 -06:00
William Ballenthin
dd70e5a2f6 main: tweak logging levels 2020-06-26 22:54:48 -06:00
William Ballenthin
d0345fcd53 render: start to implement common result document format 2020-06-26 22:54:13 -06:00
William Ballenthin
9d9d821c22 ruleset: add __getitem__ accessor to easily fetch rule by name 2020-06-26 22:39:10 -06:00
William Ballenthin
918a47cfb7 git hooks: address shellcheck issues 2020-06-26 19:04:36 -06:00
William Ballenthin
d1dd997b7b setup: add dev dependencies
closes #21
2020-06-26 18:59:23 -06:00
William Ballenthin
26fef7c615 *: formatting 2020-06-26 18:44:19 -06:00
William Ballenthin
f82e453440 linter: learn to check for unusual meta fields
closes #24
2020-06-26 18:32:17 -06:00
William Ballenthin
8f5f5b329d rule: declare the expected hidden meta fields 2020-06-26 18:31:26 -06:00
William Ballenthin
8ab91269fa linter: learn to check namespace matches rule path
closes #6
2020-06-26 18:23:47 -06:00
William Ballenthin
22537eb936 linter: learn to check filename to match rule name
closes #7
2020-06-26 18:16:20 -06:00
William Ballenthin
5de0884dd2 main: learn to save off the path to each rule 2020-06-26 18:09:51 -06:00
William Ballenthin
d32c20d140 linter: check for namespace instead of rule-category 2020-06-26 17:53:37 -06:00
William Ballenthin
35faa20e9e linter: check for namespace instead of rule-category 2020-06-26 17:52:32 -06:00
William Ballenthin
36749df848 submodule: rules: bump to rule-organization PR 2020-06-26 17:49:54 -06:00
William Ballenthin
3e973b4307 scripts: migrate-rules: fixup matches references 2020-06-26 17:43:31 -06:00
William Ballenthin
be1a7a06e1 scripts: migrate-rule: respect lib meta 2020-06-25 17:29:08 -06:00
William Ballenthin
45dea2b8aa scripts: migrate rules: respect nursery status 2020-06-22 07:40:55 -06:00
William Ballenthin
11e456f55e Merge branch 'master' of github.com:fireeye/capa 2020-06-22 07:00:57 -06:00
Willi Ballenthin
348e6c0315 Merge pull request #30 from fireeye/capa-explorer-remove-empty-structural-expressions
capa explorer remove empty structural expressions
2020-06-26 16:31:46 -06:00
Michael Hunhoff
65a4960ce9 code changes 2020-06-26 14:44:52 -06:00
Michael Hunhoff
009368f278 removing empty structural expressions from tree view 2020-06-26 14:38:14 -06:00
Willi Ballenthin
68736a07f6 Merge pull request #29 from fireeye/default-sort-capa-explorer
capa explorer tree view default to sorted asc, trim regex matches
2020-06-26 11:51:18 -06:00
Michael Hunhoff
540f68c5c7 tree view default to sorted asc, trim regex matches 2020-06-26 11:28:11 -06:00
Willi Ballenthin
7ff69097db Merge pull request #27 from fireeye/fix/dont-show-subscope-rules
do not display subscope rules in any mode
2020-06-26 11:20:25 -06:00
Moritz Raabe
dcd66f41fa do not display subscope rules in any mode 2020-06-26 16:19:07 +02:00
Willi Ballenthin
b973d7fc50 Merge pull request #26 from fireeye/vverbose-output-scope-enhancement
enhancements for displaying relevant scope data for vverbose and verbose display
2020-06-25 13:47:00 -06:00
Michael Hunhoff
e1f924ffd1 tweak verbose display to remove empty va addresses for file scope 2020-06-25 13:39:05 -06:00
Michael Hunhoff
4740bf576b Merge branch 'master' into vverbose-output-scope-enhancement 2020-06-25 13:23:00 -06:00
Michael Hunhoff
9d5ecadf95 adding support to display appropriate scope name in vverbose mode 2020-06-25 13:22:07 -06:00
Moritz
290af74368 Merge pull request #17 from fireeye/add-warnings-dialog-capa-explorer
adding new checks for file format limitations in capa explorer plugin
2020-06-25 21:07:13 +02:00
Michael Hunhoff
25f0262748 moving code around for supported file type dialouge in standalone tool and capa explorer 2020-06-25 11:09:47 -06:00
Michael Hunhoff
a5004b2014 adding support checks for AMD64/binary files in capa explorer and capa main 2020-06-25 10:05:19 -06:00
Michael Hunhoff
83dbf81d2b adding new checks for file format limitations in capa explorer plugin 2020-06-24 16:29:30 -06:00
Willi Ballenthin
9842ae6c8f Merge pull request #10 from fireeye/doc/code-review-improvements
update documentation
2020-06-24 08:23:12 -06:00
Willi Ballenthin
53f374024b Merge branch 'master' into doc/code-review-improvements 2020-06-24 08:22:52 -06:00
Willi Ballenthin
fb6d8354bd Merge pull request #11 from fireeye/mr-tz-update-setup-hooks
Update setup-hooks.sh
2020-06-24 08:17:02 -06:00
Willi Ballenthin
3defaf0d22 Merge pull request #13 from fireeye/all-the-single-quotes
double to single quotes
2020-06-24 08:15:58 -06:00
Moritz Raabe
beba3fb3c7 double to single quotes 2020-06-24 15:00:35 +02:00
Moritz
95b3b129ec Update setup-hooks.sh 2020-06-24 14:29:50 +02:00
Moritz Raabe
730f0b21fe document -t (tag) option 2020-06-24 13:23:46 +02:00
Moritz
d3d7070e95 Merge pull request #9 from fireeye/ana-build
Remove Build Status from README
2020-06-24 13:01:20 +02:00
Moritz Raabe
d2d1f26e7b update documentation 2020-06-24 12:55:35 +02:00
Ana María Martínez Gómez
72b6ee5cf3 Remove Build Status from README
This should have been removed as part of the migration. The build status
in the README will be reimplemented using GitHub Actions and
https://shields.io
2020-06-24 12:31:01 +02:00
Willi Ballenthin
fa9bb946ed Merge pull request #1 from fireeye/ana-hooks
Add hooks for running linters and tests
2020-06-22 09:42:07 -06:00
Willi Ballenthin
273ca81919 Merge pull request #2 from fireeye/doc/submodule-install
add submodule doc
2020-06-22 09:41:29 -06:00
William Ballenthin
dfaa907319 scripts: migrate rules: better variable names 2020-06-22 07:00:23 -06:00
William Ballenthin
ffd926c84c scripts: migrate-rules: detect rules that aren't in the migration plan 2020-06-22 06:59:10 -06:00