Develop script to highlight features unused during matching

[Aayush-Goel-04]

closes #331

Logic Used

1. Get all features from sample file using scripts/show_features.py.
2. Create a set of all features present in rules in rules directory.
3. Print all file features not present in rules feature set.

Checklist

• No CHANGELOG update needed

• No new tests needed

• No documentation update needed

[Aayush-Goel-04]

add color to count and feature class.

[williballenthin]

see recommendations inline. most are type hint updates. moving the get_all_features routine to Rule will help cut down on the logic duplicated across a few scripts, which is nice.

as for the output, would you:

• highlight/color only the content between the parentheses, and
• order the output from least to most common

all in all, this is neat, thank you @Aayush-Goel-04!

[williballenthin]

would you please also add a test showing the invocation of the script, like we do here: https://github.com/mandiant/capa/blob/master/tests/test_scripts.py#L45

[mr-tz]

only noting small things I've noticed, overall this is great

[williballenthin]

please address test failures on python 3.8 (maybe syntax/typing related?).

[mr-tz]

=================================== FAILURES ===================================
_________________ test_scripts[show-unused-features.py-args6] __________________

script = 'show-unused-features.py'
args = ['/home/runner/work/capa/capa/tests/data/9324d1a8ae37a36ae560c37448c9705a.exe_']

    @pytest.mark.parametrize(
        "script,args",
        [
            pytest.param("capa2yara.py", [get_rules_path()]),
            pytest.param("capafmt.py", [get_rule_path()]),
            # not testing lint.py as it runs regularly anyway
            pytest.param("match-function-id.py", [get_file_path()]),
            pytest.param("show-capabilities-by-function.py", [get_file_path()]),
            pytest.param("show-features.py", [get_file_path()]),
            pytest.param("show-features.py", ["-F", "0x407970", get_file_path()]),
            pytest.param("show-unused-features.py", [get_file_path()]),
            pytest.param("capa_as_library.py", [get_file_path()]),
        ],
    )
    def test_scripts(script, args):
        script_path = get_script_path(script)
        p = run_program(script_path, args)
>       assert p.returncode == 0
E       AssertionError: assert 1 == 0
E        +  where 1 = CompletedProcess(args=['/opt/hostedtoolcache/Python/3.8.17/x64/bin/python', '/home/runner/work/capa/capa/tests/../scripts/show-unused-features.py', '/home/runner/work/capa/capa/tests/data/9324d1a8ae37a36ae560c37448c9705a.exe_'], returncode=1, stdout=b'').returncode

tests/test_scripts.py:55: AssertionError
----------------------------- Captured stderr call -----------------------------
Traceback (most recent call last):
  File "/home/runner/work/capa/capa/tests/../scripts/show-unused-features.py", line 55, in <module>
    ) -> Counter[Feature]:
TypeError: 'type' object is not subscriptable

[Aayush-Goel-04]

@williballenthin @mr-tz all tests are passing now.

[williballenthin]

see inline tweaks, then we'll be ready to merge.

[Aayush-Goel-04]

see inline tweaks, then we'll be ready to merge.

Done,

[williballenthin]

thank you @Aayush-Goel-04 !