Dépôts
Dépôts de mandiant
Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.
The FLARE team's open-source tool to identify capabilities in executable files.
Standard collection of rules for capa: the tool for enumerating the capabilities of programs
Data to test capa's code and rules.
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
Resources for testing FLOSS by the FLARE team.
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
Windows kernel and user mode emulation.