capa icon indicating copy to clipboard operation
capa copied to clipboard

explorer: provide capa insight via "hint" popups

Open williballenthin opened this issue 4 years ago • 1 comments

IDA plugins can override the "hints" displayed to a user when they hover over an address. By default, this displays the first few lines of disassembly. We could override this behavior and provide a summary of the function's capabilities, via the capa rule matches.

Example of the implementation is here: https://github.com/williballenthin/idawilli/blob/master/plugins/dynamic_hints/dynamic_hints.py

image

williballenthin avatar May 03 '21 19:05 williballenthin

note that we wouldn't want to override this behavior if the user doesn't want it. so there would need to be some configurable setting.

williballenthin avatar May 03 '21 19:05 williballenthin