mirror of
https://github.com/mandiant/capa.git
synced 2025-12-12 15:49:46 -08:00
14 lines
543 B
Markdown
14 lines
543 B
Markdown
# capa usage
|
|
|
|
See `capa -h` for all supported arguments and usage examples.
|
|
|
|
## tips and tricks
|
|
|
|
### only run selected rules
|
|
Use the `-t` option to run rules with the given metadata value (see the rule fields `rule.meta.*`).
|
|
For example, `capa -t william.ballenthin@mandiant.com` runs rules that reference Willi's email address (probably as the author), or
|
|
`capa -t communication` runs rules with the namespace `communication`.
|
|
|
|
### IDA Pro plugin: capa explorer
|
|
Please check out the [capa explorer documentation](/capa/ida/plugin/README.md).
|