-
Notifications
You must be signed in to change notification settings - Fork 496
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
update output rendering #34
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🙏 very awesome! this is a great improvement! a couple of comments and ideas around outputting we can discuss further.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
💘
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
A+ @williballenthin 👏. This is awesome! I love the new output formats.
to be merged alongside mandiant/capa-rules#14
removes references to
rule-category
and makes capa aware of thenamespace
meta key. adds modules for rendering the results in a variety of formats, including: default, verbose, vverbose, and json.also some misc changes:
default format
i don't love that the various tables have different widths. also, the ATT&CK tables tend to be a bit sparse. i may try to tweak this a bit to make things a bit tighter.
verbose format
vverbose format
i figured out how to wire up the results across subscope and match statements, making this view substantially more thorough than what we had before!
haven't yet implemented feature context, since i think we're soon going to add the context in a consistent way. i expect these changes to be ~5 line fix once context lands.
json format
all the other output formats simply translate this json format into something more pretty. so, this makes it feasible for external tools to invoke capa, parse the output, and make decisions.