explorer: rule generator enhancements
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 6.2k
- Forks
- 726
- Avg merge
- 11d 11h
- Merged PRs (30d)
- 7
Description
## Summary
Tracking enhancements originally added in #163 which added the support.
## Motivation
Enhance easy rule writing from withing IDA.
## Functionality
The following is a list of functionality to support (no specific order):
- [ ] edit existing rule
- [ ] auto populate directory and filename when saving rule
- [ ] implement levels of verbosity in regards to number of feature forms displayed
- [ ] automatically generate description for symbolic constants mapped by IDA Pro
- [ ] allow user to add arbitrary nodes to tree editor
- [ ] filter features extracted from function by basic block
- [ ] filter features extracted from function by current address +/-N heads/instructions
- [ ] filter features extracted from function by user's highlighted address range
- [ ] option to display failed branches; show failing branches (highlighted accordingly) so rule developers can see what features exist/are missing in a function/sample.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue lists several enhancements to the existing IDA support from #163 but names no files, tests, or entry points. Start by inspecting the implementation added in #163 and select one enhancement to scope separately. Done should mean one clearly defined enhancement works in IDA and has appropriate validation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- reverse-engineering, tooling
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100