MANDIANT

All

94 repositories

VM-Packages
Public
Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
reverse-engineering malware-analysis chocolatey-packages flare
PowerShell
•
Apache License 2.0
•73•158•106•10•Updated Jan 24, 2025Jan 24, 2025
capa
Public
The FLARE team's open-source tool to identify capabilities in executable files.
reverse-engineering malware-analysis binary-analysis threat-intelligence
Python
•
Apache License 2.0
•569•5k•225•13•Updated Jan 23, 2025Jan 23, 2025
capa-testfiles
Public
Data to test capa's code and rules.
Max
•
Apache License 2.0
•68•41•0•6•Updated Jan 23, 2025Jan 23, 2025
flare-vm
Public
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
reverse-engineering malware-analysis flare
PowerShell
•
Apache License 2.0
•946•6.8k•16•1•Updated Jan 22, 2025Jan 22, 2025
xrefer
Public
FLARE Team's Binary Navigator
reverse-engineering ida-pro malware-analysis binary-analysis idapython threat-intelligence idaplugin
Python
•
Apache License 2.0
•14•207•0•0•Updated Jan 22, 2025Jan 22, 2025
capa-rules
Public
Standard collection of rules for capa: the tool for enumerating the capabilities of programs
Apache License 2.0
•164•560•103•4•Updated Jan 21, 2025Jan 21, 2025
flare-floss
Public
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
strings deobfuscation flare gsoc-2024 malware malware-analysis
Python
•
Apache License 2.0
•464•3.4k•91•10•Updated Jan 20, 2025Jan 20, 2025
flare-fakenet-ng
Public
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
traffic-redirection fakenet-ng mandiant-flare gsoc-2024 malware-analysis
Python
•
Apache License 2.0
•364•1.8k•60•23•Updated Jan 17, 2025Jan 17, 2025
macos-UnifiedLogs
Public
Rust
•
Apache License 2.0
•23•224•8•4•Updated Jan 13, 2025Jan 13, 2025
dncil
Public
The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.
gsoc-2024
Python
•
Apache License 2.0
•17•159•2•7•Updated Jan 6, 2025Jan 6, 2025
PwnAuth
Public
Python
•
Apache License 2.0
•90•377•2•10•Updated Dec 23, 2024Dec 23, 2024
gootloader
Public
Collection of scripts used to deobfuscate GOOTLOADER malware samples.
deobfuscation gootloader
Python
•
Apache License 2.0
•9•59•1•0•Updated Dec 19, 2024Dec 19, 2024
gocrack
Public
GoCrack is a management frontend for password cracking tools written in Go
fireeye-flare
Go
•
MIT License
•241•1.2k•18•8•Updated Dec 11, 2024Dec 11, 2024
gocrack-ui
Public
The User Interface for GoCrack
fireeye-flare
Vue
•
MIT License
•50•86•0•33•Updated Dec 11, 2024Dec 11, 2024
flare-floss-testfiles
Public
Resources for testing FLOSS by the FLARE team.
C
•20•7•0•0•Updated Nov 12, 2024Nov 12, 2024
STrace
Public
A DTrace on Windows Reimplementation
gsoc-2024
C++
•
MIT License
•41•337•7•3•Updated Oct 30, 2024Oct 30, 2024
flare-ida
Public
IDA Pro utilities from FLARE team
reverse-engineering ida-pro ida-plugin idapython fireeye-flare ida
Python
•
Apache License 2.0
•463•2.3k•22•3•Updated Oct 29, 2024Oct 29, 2024
flare-emu
Public archive
emulation malware-analysis fireeye-flare
Python
•
Apache License 2.0
•122•810•4•1•Updated Oct 27, 2024Oct 27, 2024
GoReSym
Public
Go symbol recovery tool
gsoc-2024
Go
•
MIT License
•69•649•8•3•Updated Oct 19, 2024Oct 19, 2024
Vulnerability-Disclosures
Public
C++
•66•197•0•0•Updated Oct 18, 2024Oct 18, 2024
commando-vm
Public
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
penetration-testing red-teaming fireeye-flare windows
PowerShell
•
Apache License 2.0
•1.3k•7.1k•6•2•Updated Sep 24, 2024Sep 24, 2024
shelidate
Public
Go
•
Apache License 2.0
•1•3•0•0•Updated Sep 5, 2024Sep 5, 2024
GeoLogonalyzer
Public
GeoLogonalyzer is a utility to analyze remote access logs for anomalies such as travel feasibility and data center sources.
Python
•
Apache License 2.0
•55•197•5•4•Updated Aug 12, 2024Aug 12, 2024
ADFSpoof
Public
Python
•
Apache License 2.0
•62•360•2•3•Updated Aug 12, 2024Aug 12, 2024
stringsifter
Public
A machine learning tool that ranks strings based on their relevance for malware analysis.
machine-learning strings reverse-engineering learning-to-rank fireeye-flare fireeye-data-science malware-analysis
Python
•
Apache License 2.0
•125•695•6•2•Updated Jul 15, 2024Jul 15, 2024
Ghidrathon
Public
The FLARE team's open-source extension to add Python 3 scripting to Ghidra.
gsoc-2024
Java
•
Apache License 2.0
•53•717•20•2•Updated May 8, 2024May 8, 2024
speakeasy
Public
Windows kernel and user mode emulation.
emulation gsoc-2023 malware-analysis
Python
•
MIT License
•235•1.6k•37•4•Updated Apr 12, 2024Apr 12, 2024
gocat
Public
Provides access to libhashcat
fireeye-flare
Go
•
MIT License
•25•30•1•5•Updated Apr 6, 2024Apr 6, 2024
ccmpwn
Public
Python
•
Apache License 2.0
•23•187•0•0•Updated Mar 26, 2024Mar 26, 2024
red_team_tool_countermeasures
Public
YARA
•
BSD 2-Clause "Simplified" License
•845•2.7k•2•1•Updated Mar 5, 2024Mar 5, 2024