Skip to content

[pull] master from kevoreilly:master - #547

Merged
pull[bot] merged 4 commits into
threatcode:masterfrom
kevoreilly:master
Sep 30, 2026
Merged

pull[bot] merged 4 commits into
threatcode:masterfrom
kevoreilly:master

Conversation

@pull

@pull pull Bot commented Sep 30, 2026 •

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

doomedraven and others added 4 commits September 30, 2026 08:54
…3263)

* network: fix behavior-derived WinHTTP requests missing domain/port

- winhttp_finalize_sessions: iterate connects instead of sessions so requests
  survive when WinHttpOpen was not captured; derive https from
  WINHTTP_FLAG_SECURE or port 443; handle INTERNET_DEFAULT_PORT (0); emit full
  url and dport.
- _merge_behavior_network: put full URL in uri (network.http template renders
  only uri, matching PCAP entries), fix dport read from wrong key, emit all
  requests per host instead of only the first.

* network: replace deprecated typing.Dict/List with builtins (ruff UP006/UP035)

* network: use PEP 604 X | None instead of Optional (ruff UP045, py>=3.10)

* network: apply remaining ruff pyupgrade fixes (UP015/UP024/UP028/UP031)
…ve batch detection (#3265)

* fix(demux): support ignore_junk_filter in archive extraction and improve batch detection

- Propagate ignore_junk_filter to _sf_children and demux_sflock to support archive extractions
- Make @echo off detection case-insensitive in choose_package
- Add batch and autoit to sandbox_packages in tasking
- Add unit tests for junk filter and ignore_junk_filter in test_demux

* tests(demux): fix bytes vs str assertion in test_demux_junk_filter_ignored_with_option

---------

Co-authored-by: doomedraven <doomedraven@MacBook-Pro-de-doomedraven-2.local>
@pull pull Bot locked and limited conversation to collaborators Sep 30, 2026
@pull pull Bot added the ⤵️ pull label Sep 30, 2026
@pull
pull Bot merged commit 82e002b into threatcode:master Sep 30, 2026
1 check passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants