MyGit

v7.2.0

mandiant/capa

版本发布时间: 2024-08-21 02:15:05

mandiant/capa最新发布版本:v7.4.0(2024-10-04 19:53:51)

capa v7.2.0 introduces a first version of capa explorer web: a web-based user interface to inspect capa results using your browser. Users can inspect capa result JSON documents in an online web instance or a standalone HTML page for offline usage. capa explorer supports interactive exploring of capa results to make it easier to understand them. Users can filter, sort, and see the details of all identified capabilities. capa explorer web was worked on by @s-ff as part of a GSoC project, and it is available at https://mandiant.github.io/capa/explorer/#/.

This release also adds a feature extractor for output from the DRAKVUF sandbox. Now, analysts can pass the resulting drakmon.log file to capa and extract capabilities from the artifacts captured by the sandbox. This feature extractor will also be added to the DRAKVUF sandbox as a post-processing script, and it was worked on by @yelhamer as part of a GSoC project.

Additionally, we fixed several bugs handling ELF files, and added the ability to filter capa analysis by functions or processes. We also added support to the IDA Pro extractor to leverage analyst recovered API names.

Special thanks to our repeat and new contributors:

New Features

Breaking Changes

New Rules (5)

Bug Fixes

capa explorer IDA Pro plugin

Development

Raw diffs

相关地址:原始地址 下载(tar) 下载(zip)

1、 capa-v7.2.0-linux-py311.zip 51.08MB

2、 capa-v7.2.0-linux.zip 42.03MB

3、 capa-v7.2.0-macos.zip 33.15MB

4、 capa-v7.2.0-windows.zip 32.22MB

查看:2024-08-21发行的版本