Skip to content

Commit 7c4a46b

Browse files
update to v5.1.0 (#1429)
* update to v5.1.0 --------- Co-authored-by: Willi Ballenthin <[email protected]>
1 parent 8fe88f6 commit 7c4a46b

File tree

2 files changed

+30
-9
lines changed

2 files changed

+30
-9
lines changed

CHANGELOG.md

+29-8
Original file line numberDiff line numberDiff line change
@@ -2,14 +2,38 @@
22

33
## master (unreleased)
44

5+
### New Features
6+
7+
### Breaking Changes
8+
9+
### New Rules (0)
10+
11+
-
12+
13+
### Bug Fixes
14+
15+
### capa explorer IDA Pro plugin
16+
17+
### Development
18+
19+
### Raw diffs
20+
- [capa v5.1.0...master](https://github.com/mandiant/capa/compare/v5.1.0...master)
21+
- [capa-rules v5.1.0...master](https://github.com/mandiant/capa-rules/compare/v5.1.0...master)
22+
23+
## v5.1.0
24+
capa version 5.1.0 adds a Protocol Buffers (protobuf) format for result documents. Additionally, the [Vector35](https://vector35.com/) team contributed a new feature extractor using Binary Ninja. Other new features are a new CLI flag to override the detected operating system, functionality to read and render existing result documents, and a output color format that's easier to read.
25+
26+
Over 25 capa rules have been added and improved.
27+
28+
Thanks for all the support, especially to @xusheng6, @captainGeech42, @ggold7046, @manasghandat, @ooprathamm, @linpeiyu164, @yelhamer, @HongThatCong, @naikordian, @stevemk14ebr, @emtuls, @raymondlleong, @bkojusner, @joren485, and everyone else who submitted bugs and provided feedback!
29+
530
### New Features
631
- add protobuf format for result documents #1219 @williballenthin @mr-tz
732
- extractor: add Binary Ninja feature extractor @xusheng6
833
- new cli flag `--os` to override auto-detected operating system for a sample @captainGeech42
9-
- Change colour/highlight to "cyan" instead of "blue" for easy noticing.#1384 @ggold7046
34+
- change colour/highlight to "cyan" instead of "blue" for better readability #1384 @ggold7046
1035
- add new format to parse output json back to capa #1396 @ooprathamm
11-
12-
### Breaking Changes
36+
- parse ELF symbols' names to guess OS #1403 @yelhamer
1337

1438
### New Rules (26)
1539

@@ -39,7 +63,6 @@
3963
- nursery/send-data-to-internet [email protected]
4064
- nursery/compiled-with-cx_freeze @mr-tz
4165
- nursery/contain-a-thread-local-storage-tls-section-in-dotnet [email protected]
42-
-
4366

4467
### Bug Fixes
4568
- extractor: removed '.dynsym' as the library name for ELF imports #1318 @stevemk14ebr
@@ -51,11 +74,9 @@
5174
- fix exception when plugin loaded in IDA hosted under idat #1341 @mike-hunhoff
5275
- improve embedded PE detection performance and reduce FP potential #1344 @mike-hunhoff
5376

54-
### Development
55-
5677
### Raw diffs
57-
- [capa v5.0.0...master](https://github.com/mandiant/capa/compare/v5.0.0...master)
58-
- [capa-rules v5.0.0...master](https://github.com/mandiant/capa-rules/compare/v5.0.0...master)
78+
- [capa v5.0.0...v5.1.0](https://github.com/mandiant/capa/compare/v5.0.0...v5.1.0)
79+
- [capa-rules v5.0.0...v5.1.0](https://github.com/mandiant/capa-rules/compare/v5.0.0...v5.1.0)
5980

6081

6182
## v5.0.0 (2023-02-08)

capa/version.py

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
__version__ = "5.0.0"
1+
__version__ = "5.1.0"
22

33

44
def get_major_version():

0 commit comments

Comments
 (0)