Search results

idea: optimize rule matching via bit sets

Status: Open.

#3074 In mandiant/capa;

· williballenthin opened on May 13, 2026

idea: optimize regex/substring matching using literal prefix and Aho-Corasick

Status: Open.

#3073 In mandiant/capa;

· williballenthin opened on May 13, 2026

consider removing RelativeVirtualAddress

Status: Open.

#3072 In mandiant/capa;

· williballenthin opened on May 12, 2026

add AGENTS.md to explain to agents how to work with the codebase

Status: Open.

#3056 In mandiant/capa;

· williballenthin opened on Apr 23, 2026

rule match snapshot tests

Status: Open.

#3055 In mandiant/capa;

· williballenthin opened on Apr 23, 2026

feature snapshot tests

Status: Open.

#3054 In mandiant/capa;

· williballenthin opened on Apr 23, 2026

bug: inconsistent missing resource handling

Status: Open.

#3010 In mandiant/capa;

· vee1e opened on Apr 15, 2026

migrate freeze format to protobuf

breaking-changeintroduces a breaking change that should be released in a major versionintroduces a breaking change that should be released in a major version

enhancementNew feature or requestNew feature or request

Status: Open.

Feature

#3005 In mandiant/capa;

· williballenthin opened on Apr 13, 2026

ghidra: enable feature extraction from existing Ghidra project binary

enhancementNew feature or requestNew feature or request

ghidraRelated to Ghidra integrationRelated to Ghidra integration

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#3004 In mandiant/capa;

· mike-hunhoff opened on Apr 7, 2026

bug(ghidra): function truncation during analysis

bugSomething isn't workingSomething isn't working

ghidraRelated to Ghidra integrationRelated to Ghidra integration

Status: Open.

#2989 In mandiant/capa;

· sashwathsubra opened on Apr 3, 2026

Feature: Native script support (Bash/Python/PowerShell) via Tree-sitter AST

enhancementNew feature or requestNew feature or request

tree-sitterrelated to tree-sitter feature extractionrelated to tree-sitter feature extraction

Status: Open.

#2988 In mandiant/capa;

· sashwathsubra opened on Apr 3, 2026

create data-driven rule matching test fixtures

enhancementNew feature or requestNew feature or request

Status: Open.

#2985 In mandiant/capa;

· williballenthin opened on Apr 2, 2026