MANDIANT

All

100 repositories

flare-floss
Public
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
strings malware deobfuscation malware-analysis flare gsoc-2025
Python
•
Apache License 2.0
•508•3.8k•99•17•Updated Dec 16, 2025Dec 16, 2025
harbinger
Public
Python
•
Apache License 2.0
•15•139•0•10•Updated Dec 16, 2025Dec 16, 2025
capa
Public
The FLARE team's open-source tool to identify capabilities in executable files.
reverse-engineering malware-analysis binary-analysis threat-intelligence gsoc-2025
Python
•
Apache License 2.0
•636•5.7k•251•28•Updated Dec 16, 2025Dec 16, 2025
xrefer
Public
FLARE Team's Binary Navigator
reverse-engineering ida-pro malware-analysis binary-analysis idapython threat-intelligence idaplugin gsoc-2025
Python
•
Apache License 2.0
•34•296•8•3•Updated Dec 16, 2025Dec 16, 2025
VM-Packages
Public
Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
reverse-engineering malware-analysis chocolatey-packages flare
PowerShell
•
Apache License 2.0
•88•206•106•9•Updated Dec 16, 2025Dec 16, 2025
flare-fakenet-ng
Public
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
malware-analysis traffic-redirection fakenet-ng mandiant-flare gsoc-2025
Python
•
Apache License 2.0
•376•2k•64•21•Updated Dec 9, 2025Dec 9, 2025
PwnAuth
Public
Python
•
Apache License 2.0
•96•398•2•10•Updated Dec 5, 2025Dec 5, 2025
Vulnerability-Disclosures
Public
C++
•70•212•0•0•Updated Dec 4, 2025Dec 4, 2025
capa-rules
Public
Standard collection of rules for capa: the tool for enumerating the capabilities of programs
Apache License 2.0
•202•660•119•4•Updated Dec 4, 2025Dec 4, 2025
capa-testfiles
Public
Data to test capa's code and rules.
Max
•
Apache License 2.0
•80•46•0•6•Updated Dec 3, 2025Dec 3, 2025
speakeasy
Public
Windows kernel and user mode emulation.
emulation malware-analysis gsoc-2025
Python
•
MIT License
•269•1.8k•43•5•Updated Dec 2, 2025Dec 2, 2025
GoReSym
Public
Go symbol recovery tool
gsoc-2025
Go
•
MIT License
•86•867•9•1•Updated Dec 1, 2025Dec 1, 2025
vrt-sdk
Public
Python
•
Apache License 2.0
•3•1•0•0•Updated Nov 24, 2025Nov 24, 2025
gocrack
Public
GoCrack is a management frontend for password cracking tools written in Go
fireeye-flare
Go
•
MIT License
•241•1.3k•18•9•Updated Nov 19, 2025Nov 19, 2025
gocrack-ui
Public
The User Interface for GoCrack
fireeye-flare
Vue
•
MIT License
•50•88•0•37•Updated Nov 18, 2025Nov 18, 2025
brickstorm-scanner
Public
Shell
•14•80•1•1•Updated Nov 14, 2025Nov 14, 2025
gootloader
Public
Collection of scripts used to deobfuscate GOOTLOADER malware samples.
deobfuscation gootloader
Python
•
Apache License 2.0
•9•73•1•0•Updated Nov 7, 2025Nov 7, 2025
dncil
Public
The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.
gsoc-2025
Python
•
Apache License 2.0
•19•170•2•7•Updated Nov 3, 2025Nov 3, 2025
commando-vm
Public
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]
windows penetration-testing red-teaming fireeye-flare
PowerShell
•
Apache License 2.0
•1.3k•7.4k•6•2•Updated Oct 16, 2025Oct 16, 2025
macos-UnifiedLogs
Public
A cross platform parser for Apple UnifiedLogs!
macos rust apple forensics dfir
Rust
•
Apache License 2.0
•34•301•5•0•Updated Oct 12, 2025Oct 12, 2025
STrace
Public
A DTrace on Windows Reimplementation
gsoc-2024
C++
•
MIT License
•48•366•7•2•Updated Oct 3, 2025Oct 3, 2025
flare-vm
Public
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
reverse-engineering malware-analysis flare
PowerShell
•
Apache License 2.0
•1.1k•8.1k•19•5•Updated Sep 17, 2025Sep 17, 2025
vrt-auto
Public
Python
•
Apache License 2.0
•2•1•0•0•Updated Aug 29, 2025Aug 29, 2025
flare-floss-testfiles
Public
Resources for testing FLOSS by the FLARE team.
C
•20•7•0•0•Updated Aug 29, 2025Aug 29, 2025
flare-emu
Public
emulation malware-analysis fireeye-flare
Python
•
Apache License 2.0
•138•906•5•1•Updated Aug 14, 2025Aug 14, 2025
ADFSpoof
Public
Python
•
Apache License 2.0
•67•407•2•5•Updated Jun 5, 2025Jun 5, 2025
stringsifter
Public
A machine learning tool that ranks strings based on their relevance for malware analysis.
machine-learning strings reverse-engineering learning-to-rank malware-analysis fireeye-flare fireeye-data-science
Python
•
Apache License 2.0
•125•745•8•2•Updated May 19, 2025May 19, 2025
poisonplug-scatterbrain
Public
Deobfuscation library for PoisionPlug.SHADOW's ScatterBrain obfuscator
Python
•
Apache License 2.0
•9•73•0•0•Updated Mar 14, 2025Mar 14, 2025
flare-gsoc
Public
Supporting resources and documentation for FLARE @ Google Summer of Code 2025
Apache License 2.0
•4•29•0•0•Updated Mar 3, 2025Mar 3, 2025
gostringungarbler
Public
Python tool to resolve all strings in Go binaries obfuscated by garble
Python
•
Apache License 2.0
•7•154•2•0•Updated Feb 21, 2025Feb 21, 2025