mandiant / capa

The FLARE team's open-source tool to identify capabilities in executable files.
https://mandiant.github.io/capa/
Apache License 2.0
4.48k stars 535 forks source link

dnfile 0.15.0 changed API #2037

Closed malwarefrank closed 3 months ago

malwarefrank commented 6 months ago

dnfile v0.15.0 contains a breaking change. The heap streams' .get() functions now return custom container objects instead of bytes.

I think I changed the necessary parts to keep same functionality, but am not definite. If necessary, feel free to close this PR and handle as you see fit. I just wanted to make it easier to integrate the breaking change.

Checklist

mr-tz commented 4 months ago

capa/features/extractors/dnfile/helpers.py:324: error: Need type annotation for "table" [var-annotated]

@malwarefrank, can you address this as well, please?