|
3 | 3 | All notable changes to **capa** are documented here. |
4 | 4 | This project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html). |
5 | 5 |
|
6 | | -## [0.4.4] — 2026-05-27 — FLIRT polish |
| 6 | +## [0.4.3] — 2026-05-27 — FLIRT polish |
7 | 7 |
|
8 | 8 | ### Added |
9 | | - |
| 9 | + |
| 10 | +- **FLIRT matcher.** `AnalyzeBuilder::signatures(path)` loads |
| 11 | + `.sig` and `.pat` files from a directory; matched functions are |
| 12 | + flagged as library code and excluded from the capability output. |
| 13 | + Engine: [`fast-flirt`](https://crates.io/crates/fast-flirt). |
| 14 | +- **`capa_cli --signatures PATH`** flag. |
| 15 | +- **`flirt-sigs/`** — 195 `.sig` files (~70 MB) covering MSVC CRT, |
| 16 | + ATL/MFC, OpenSSL, zlib, boost, libcurl, lua, protobuf, DirectX, |
| 17 | + and Intel libs on Windows. Sourced from Mandiant FLARE |
| 18 | + (`mandiant/`, Apache-2.0) and Maktm's FLIRTDB (`flirtdb/`, |
| 19 | + community-permissive). Credits in `flirt-sigs/README.md`. |
| 20 | +- **`flirt-sigs-vX.Y.Z.tar.gz`** GitHub release artifact carrying |
| 21 | + the same content; download, extract, point `--signatures` at it. |
10 | 22 | - **`AnalyzeBuilder::with_flirt_matcher(Arc<FlirtMatcher>)`.** Reuse |
11 | 23 | one loaded signature corpus across many `from_file` / `from_buffer` |
12 | 24 | calls instead of re-walking the directory and rebuilding the trie |
@@ -52,22 +64,6 @@ This project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html). |
52 | 64 | gunzip to enable)` so the gap is visible. Hard-fails only when the |
53 | 65 | directory yields zero parseable signatures. |
54 | 66 |
|
55 | | -## [0.4.3] — 2026-05-26 — FLIRT library-function recognition |
56 | | - |
57 | | -### Added |
58 | | - |
59 | | -- **FLIRT matcher.** `AnalyzeBuilder::signatures(path)` loads |
60 | | - `.sig` and `.pat` files from a directory; matched functions are |
61 | | - flagged as library code and excluded from the capability output. |
62 | | - Engine: [`fast-flirt`](https://crates.io/crates/fast-flirt). |
63 | | -- **`capa_cli --signatures PATH`** flag. |
64 | | -- **`flirt-sigs/`** — 195 `.sig` files (~70 MB) covering MSVC CRT, |
65 | | - ATL/MFC, OpenSSL, zlib, boost, libcurl, lua, protobuf, DirectX, |
66 | | - and Intel libs on Windows. Sourced from Mandiant FLARE |
67 | | - (`mandiant/`, Apache-2.0) and Maktm's FLIRTDB (`flirtdb/`, |
68 | | - community-permissive). Credits in `flirt-sigs/README.md`. |
69 | | -- **`flirt-sigs-vX.Y.Z.tar.gz`** GitHub release artifact carrying |
70 | | - the same content; download, extract, point `--signatures` at it. |
71 | 67 |
|
72 | 68 | ## [0.4.2] — 2026-05-26 — Performance, threading, hardening |
73 | 69 |
|
|
0 commit comments