Owner

mandiant

21 indexed repositories · View on GitHub

• flare-vm

  A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering env...

  PowerShell · 9052 stars

• commando-vm

  Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mand...

  PowerShell · 7808 stars

• capa

  The FLARE team's open-source tool to identify capabilities in executable files.

  Python · 6190 stars

• flare-floss

  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

  Python · 4154 stars

• flare-fakenet-ng

  FakeNet-NG - Next Generation Dynamic Network Analysis Tool

  Python · 2201 stars

• speakeasy

  Windows kernel and user mode emulation.

  Python · 2053 stars

• gocrack

  GoCrack is a management frontend for password cracking tools written in Go

  Go · 1287 stars

• GoReSym

  Go symbol recovery tool

  Go · 1092 stars

• flare-emu

  Python · 955 stars

• stringsifter

  A machine learning tool that ranks strings based on their relevance for malware analysis.

  Python · 763 stars

• capa-rules

  Standard collection of rules for capa: the tool for enumerating the capabilities of programs

  736 stars

• gopacket

  A complete Go port of Impacket - 63 CLI tools and 24 libraries for Windows & Active Directory protocol attacks, compiled to a single depe...

  Go · 708 stars

• ADFSpoof

  Python · 426 stars

• PwnAuth

  Python · 402 stars

• STrace

  A DTrace on Windows Reimplementation

  C++ · 379 stars

• macos-UnifiedLogs

  A cross platform parser for Apple UnifiedLogs!

  Rust · 376 stars

• xrefer

  FLARE Team's Binary Navigator

  Python · 322 stars

• VM-Packages

  Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.

  PowerShell · 246 stars

• dncil

  The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.

  Python · 179 stars

• brickstorm-scanner

  Shell · 89 stars

• 1 more repository lives on View on GitHub