Code

add dynamic features#1530

Code

Closed

yelhamer wants to merge 37 commits intomandiant:dynamic-feature-extractionmandiant/capa:dynamic-feature-extractionfrom yelhamer:dynamic-featuresyelhamer/capa:dynamic-featuresCopy head branch name to clipboard

+66-3

Commits

Commits on Jun 8, 2023

• add abstract DynamicExtractor class

  yelhamer

  committed
  35e53e9

Commits on Jun 9, 2023

• fix bad comment

  Show description for dac103c
  

  yelhamer

  and

  mr-tz

  authored
  dac103c

• get_threads(): fix mypy typing

  Show description for f243749
  

  yelhamer

  and

  mr-tz

  authored
  f243749

Commits on Jun 11, 2023

• extend the API feature to support an strace-like argument style

  yelhamer

  committed
  86e2f83

• add a Registry feature

  yelhamer

  committed
  efe1d1c

• add a Filename feature

  yelhamer

  committed
  632b3ff

• add a Mutex feature

  yelhamer

  committed
  5a10b61

Commits on Jun 13, 2023

• remove from_trace() and submit_sample() methods

  yelhamer

  committed
  a6ca3aa

• Merge branch 'dynamic-extractor' into dynamic-features

  yelhamer

  committed
  45c3345

• add parent process id to the process handle

  yelhamer

  committed
  5ee4fc2

• Merge branch 'dynamic-extractor' into dynamic-features

  yelhamer

  committed
  10f56de

Commits on Jun 14, 2023

• add ppid documentation to the dynamic extractor interface

  yelhamer

  committed
  ece47c9

• remove ppid member from ProcessHandle

  Show description for baf209f
  

  yelhamer

  and

  williballenthin

  authored
  baf209f

• remove default implementation

  Show description for edcfece
  

  yelhamer

  and

  williballenthin

  authored
  edcfece

• Merge branch 'dynamic-feature-extraction' into dynamic-extractor

  williballenthin

  authored
  32cb575

• remove redundant types

  Show description for 7198ebe
  

  yelhamer

  and

  williballenthin

  authored
  7198ebe

• Update capa/features/extractors/base_extractor.py

  williballenthin

  authored
  23deb41

• Update capa/features/extractors/base_extractor.py

  williballenthin

  authored
  7a94f52

• Update capa/features/extractors/base_extractor.py

  williballenthin

  authored
  4c701f4

• Merge pull request mandiant#1528 from yelhamer/dynamic-extractor

  Show description for 23dc3f2
  williballenthin

  authored
  23dc3f2

• add ppid documentation to the dynamic extractor interface

  yelhamer

  committed
  58d42b0

• remove ppid member from ProcessHandle

  Show description for a8f9282
  

  yelhamer

  and

  williballenthin

  committed
  a8f9282

• remove default implementation

  Show description for 64c4f0f
  

  yelhamer

  and

  williballenthin

  committed
  64c4f0f

• Sync capa rules submodule

  

  capa-bot

  authored and

  yelhamer

  committed
  dcce4db

• Update the stack string detection with BN's builtin outlining of constant expressions

  

  xusheng6

  authored and

  yelhamer

  committed
  a7aa817

• Add a test that asserts on the binja version

  

  xusheng6

  authored and

  yelhamer

  committed
  e671e1c

• Sync capa rules submodule

  

  capa-bot

  authored and

  yelhamer

  committed
  f55804e

• Sync capa rules submodule

  

  capa-bot

  authored and

  yelhamer

  committed
  51faaae

• explorer: optimize cache and extractor interface (mandiant#1470)

  Show description for 6e3b1bc
  

  2 peopleauthored and

  yelhamer

  committed
  6e3b1bc

• remove redundant types

  Show description for 2a04707
  

  yelhamer

  and

  williballenthin

  committed
  2a04707

• Update capa/features/extractors/base_extractor.py

  

  williballenthin

  authored and

  yelhamer

  committed
  dc37158

• Update capa/features/extractors/base_extractor.py

  

  williballenthin

  authored and

  yelhamer

  committed
  6c58e26

• Update capa/features/extractors/base_extractor.py

  

  williballenthin

  authored and

  yelhamer

  committed
  e7115c7

• update the Registry, Filename, and Mutex classes

  yelhamer

  committed
  d9d9d98

Commits on Jun 15, 2023

• Merge branch 'dynamic-feature-extraction' into dynamic-features

  williballenthin

  authored
  daec911

• Merge branch 'dynamic-feature-extraction' into dynamic-features

  williballenthin

  authored
  a8320e2

• Merge branch 'dynamic-feature-extraction' into dynamic-features

  williballenthin

  authored
  4cbe1d0