mandiant / capa

The FLARE team's open-source tool to identify capabilities in executable files.
https://mandiant.github.io/capa/
Apache License 2.0
4.85k stars 558 forks source link

IDA plugin: install/download rules #1237

Open mr-tz opened 1 year ago

mr-tz commented 1 year ago

Add functionality to install/download/update rules from within the plugin.

This helps users to start using the tool more easily and to keep rules up to date.

mike-hunhoff commented 1 year ago

We could store the current capa version in settings to detect when an update occurs. When detected download and extract the latest ruleset (or manually prompt users to do it themselves).