Detect QEMU VM

Open Beginner friendly
#751 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
68/100
Issue type
Feature
Clarity
Mostly clear
Activity status
Quiet
Tech stack
powershell

Research direction

Start by locating the installer logic that checks the virtual-machine model and read how Get-CimInstance win32_computersystem is used. Extend the detection to account for a manufacturer of "QEMU" when the model check does not identify a VM, then verify that QEMU systems are accepted without changing the existing hardened-machine message.

Written by the indexing model from the issue text.

Description

Details

The installer currently does not detect virtual machines running on QEMU.
This information is not available in the model property but it is in the manufacturer:

		if (-not ($isVirtualModel)) {
			$computerSystemManufacturer = (Get-CimInstance win32_computersystem).manufacturer
			if ($computerSystemManufacturer -ne "QEMU") {
				return "You are not on a VM or have hardened your machine to not appear as such"
			}
		}
Dominant language
PowerShell
Stars
9.1k
Forks
1.1k
PR merge metrics
No merged PRs in 30d

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from mandiant/flare-vm

All issues in mandiant/flare-vm

Similar issues

More Operating Systems issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.