MANDIANT

All

93 repositories

flare-fakenet-ng
Public
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
traffic-redirection fakenet-ng mandiant-flare gsoc-2024 malware-analysis
Python
•
Apache License 2.0
•360•1.8k•57•22•Updated Nov 22, 2024Nov 22, 2024
VM-Packages
Public
Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
reverse-engineering malware-analysis chocolatey-packages flare
PowerShell
•
Apache License 2.0
•67•146•91•7•Updated Nov 22, 2024Nov 22, 2024
flare-vm
Public
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
reverse-engineering malware-analysis flare
PowerShell
•
Apache License 2.0
•921•6.6k•16•1•Updated Nov 22, 2024Nov 22, 2024
macos-UnifiedLogs
Public
Rust
•
Apache License 2.0
•19•214•8•5•Updated Nov 22, 2024Nov 22, 2024
flare-floss
Public
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
strings deobfuscation flare gsoc-2024 malware malware-analysis
Python
•
Apache License 2.0
•454•3.3k•90•6•Updated Nov 20, 2024Nov 20, 2024
capa
Public
The FLARE team's open-source tool to identify capabilities in executable files.
reverse-engineering malware-analysis binary-analysis threat-intelligence
Python
•
Apache License 2.0
•563•4.9k•227•10•Updated Nov 19, 2024Nov 19, 2024
capa-rules
Public
Standard collection of rules for capa: the tool for enumerating the capabilities of programs
Apache License 2.0
•163•543•95•7•Updated Nov 19, 2024Nov 19, 2024
gootloader
Public
Collection of scripts used to deobfuscate GOOTLOADER malware samples.
deobfuscation gootloader
Python
•
Apache License 2.0
•10•56•1•0•Updated Nov 12, 2024Nov 12, 2024
flare-floss-testfiles
Public
Resources for testing FLOSS by the FLARE team.
C
•20•7•0•0•Updated Nov 12, 2024Nov 12, 2024
capa-testfiles
Public
Data to test capa's code and rules.
Max
•
Apache License 2.0
•67•39•0•5•Updated Nov 11, 2024Nov 11, 2024
dncil
Public
The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.
gsoc-2024
Python
•
Apache License 2.0
•17•158•2•6•Updated Nov 4, 2024Nov 4, 2024
STrace
Public
A DTrace on Windows Reimplementation
gsoc-2024
C++
•
MIT License
•41•328•6•3•Updated Oct 30, 2024Oct 30, 2024
flare-ida
Public
IDA Pro utilities from FLARE team
reverse-engineering ida-pro ida-plugin idapython fireeye-flare ida
Python
•
Apache License 2.0
•465•2.2k•22•3•Updated Oct 29, 2024Oct 29, 2024
gocrack-ui
Public
The User Interface for GoCrack
fireeye-flare
Vue
•
MIT License
•51•84•0•33•Updated Oct 29, 2024Oct 29, 2024
flare-emu
Public archive
emulation malware-analysis fireeye-flare
Python
•
Apache License 2.0
•118•799•4•1•Updated Oct 27, 2024Oct 27, 2024
GoReSym
Public
Go symbol recovery tool
gsoc-2024
Go
•
MIT License
•66•614•8•3•Updated Oct 19, 2024Oct 19, 2024
Vulnerability-Disclosures
Public
C++
•64•192•0•0•Updated Oct 18, 2024Oct 18, 2024
PwnAuth
Public
Python
•
Apache License 2.0
•90•371•2•10•Updated Oct 8, 2024Oct 8, 2024
commando-vm
Public
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
penetration-testing red-teaming fireeye-flare windows
PowerShell
•
Apache License 2.0
•1.3k•7k•6•1•Updated Sep 24, 2024Sep 24, 2024
shelidate
Public
Go
•
Apache License 2.0
•1•2•0•0•Updated Sep 5, 2024Sep 5, 2024
GeoLogonalyzer
Public
GeoLogonalyzer is a utility to analyze remote access logs for anomalies such as travel feasibility and data center sources.
Python
•
Apache License 2.0
•56•195•5•4•Updated Aug 12, 2024Aug 12, 2024
ADFSpoof
Public
Python
•
Apache License 2.0
•61•354•2•3•Updated Aug 12, 2024Aug 12, 2024
stringsifter
Public
A machine learning tool that ranks strings based on their relevance for malware analysis.
machine-learning strings reverse-engineering learning-to-rank fireeye-flare fireeye-data-science malware-analysis
Python
•
Apache License 2.0
•125•683•6•2•Updated Jul 15, 2024Jul 15, 2024
gocrack
Public
GoCrack is a management frontend for password cracking tools written in Go
fireeye-flare
Go
•
MIT License
•242•1.2k•18•8•Updated Jul 5, 2024Jul 5, 2024
Ghidrathon
Public
The FLARE team's open-source extension to add Python 3 scripting to Ghidra.
gsoc-2024
Java
•
Apache License 2.0
•54•701•20•2•Updated May 8, 2024May 8, 2024
speakeasy
Public
Windows kernel and user mode emulation.
emulation gsoc-2023 malware-analysis
Python
•
MIT License
•231•1.5k•36•3•Updated Apr 12, 2024Apr 12, 2024
gocat
Public
Provides access to libhashcat
fireeye-flare
Go
•
MIT License
•24•29•1•4•Updated Apr 6, 2024Apr 6, 2024
ccmpwn
Public
Python
•
Apache License 2.0
•21•181•0•0•Updated Mar 26, 2024Mar 26, 2024
red_team_tool_countermeasures
Public
YARA
•
BSD 2-Clause "Simplified" License
•847•2.6k•2•1•Updated Mar 5, 2024Mar 5, 2024
flare-gsoc-2024
Public
Supporting resources and documentation for FLARE @ Google Summer of Code 2024
Apache License 2.0
•2•15•0•0•Updated Feb 12, 2024Feb 12, 2024