mandiant / capa

The FLARE team's open-source tool to identify capabilities in executable files.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

loading rules error in capa explorer plugin in ida pro

mounirthabet opened this issue · comments

i have a problem loading rules in Cap Explorer only Capa rules version 4.0.0 can be loaded the new version 6.0.0 Gives me many errors

Thank you for reaching out @mounirthabet . The version of capa that you are using must match the version of the capa rules that you are using. You will need to upgrade capa to the latest version to use the latest version of the capa rules.

Check out our capa explorer installation instructions for more information.

Let us know here if upgrading to the latest version of capa solves your issue.

Hey @mounirthabet, did Mike's comment help?

Would it be helpful to add an automatic check to see if the version of Capa installed matches the version of Capa rules installed? This way, if the versions don't match, the user will be given an appropriate error statement explaining the issue so they can know the problem and how to resolve it. I can implement this if you think it would be a good idea!

@JCoonradt unfortunately the rules don't have an embedded version so it's not easy to tell if there's a mismatch

For reference, the settings dialog in capa explorer shows a link to download the correct rules.

Please reopen here if this issue persists.