10000 mandiant repositories · GitHub
[go: up one dir, main page]

Skip to content
Change the repository type filter

All

    Repositories list

    • capa

      Public
      The FLARE team's open-source tool to identify capabilities in executable files.
      Python
      6515.8k24933Updated Jan 28, 2026Jan 28, 2026
    • capa-rules

      Public
      Standard collection of rules for capa: the tool for enumerating the capabilities of programs
      2096721238Updated Jan 28, 2026Jan 28, 2026
    • Vulnerability-Disclosures

      Public
      C++
      7021200Updated Jan 28, 2026Jan 28, 2026
    • capa-testfiles

      Public
      Data to test capa's code and rules.
      Max
      814705Updated Jan 28, 2026Jan 28, 2026
    • macos-UnifiedLogs

      Public
      A cross platform parser for Apple UnifiedLogs!
      Rust
      3731640Updated Jan 28, 2026Jan 28, 2026
    • flare-gsoc

      Public
      Supporting resources and documentation for FLARE @ Google Summer of Code 2025
      83200Updated Jan 27, 2026Jan 27, 2026
    • harbinger

      Public
      Python
      15142017Updated Jan 26, 2026Jan 26, 2026
    • dncil

      Public
      The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.
      Python
      1917122Updated Jan 26, 2026Jan 26, 2026
    • flare-floss

      Public
      FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
      Python
      5143.9k9414Updated Jan 26, 2026Jan 26, 2026
    • gocrack-ui

      Public
      The User Interface for GoCrack
      Vue
      5088037Updated Jan 24, 2026Jan 24, 2026
    • stringsifter

      Public
      A machine learning tool that ranks strings based on their relevance for malware analysis.
      Python
      12674983Updated Jan 22, 2026Jan 22, 2026
    • VM-Packages

      Public
      Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
      PowerShell
      9321410811Updated Jan 21, 2026Jan 21, 2026
    • GoReSym

      Public
      < 10BC0 /div>
      Go symbol recovery tool
      Go
      8989583Updated Jan 13, 2026Jan 13, 2026
    • PwnAuth

      Public
      Python
      97398210Updated Jan 7, 2026Jan 7, 2026
    • speakeasy

      Public
      Windows kernel and user mode emulation.
      Python
      2731.8k434Updated Jan 6, 2026Jan 6, 2026
    • gootloader

      Public
      Collection of scripts used to deobfuscate GOOTLOADER malware samples.
      Python
      97710Updated Dec 29, 2025Dec 29, 2025
    • flare-vm

      Public
      A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
      PowerShell
      1.1k8.3k206Updated Dec 23, 2025Dec 23, 2025
    • xrefer

      Public
      FLARE Team's Binary Navigator
      Python
      4030285Updated Dec 16, 2025Dec 16, 2025
    • flare-fakenet-ng

      Public
      FakeNet-NG - Next Generation Dynamic Network Analysis Tool
      Python
      3792.1k6222Updated Dec 9, 2025Dec 9, 2025
    • vrt-sdk

      Public
      Python
      3100Updated Nov 24, 2025Nov 24, 2025
    • gocrack

      Public
      GoCrack is a management frontend for password cracking tools written in Go
      Go
      2411.3k189Updated Nov 19, 2025Nov 19, 2025
    • brickstorm-scanner

      Public
      Shell
      148321Updated Nov 14, 2025Nov 14, 2025
    • cleanldap

      Public
      C
      59700Updated Oct 21, 2025Oct 21, 2025
    • commando-vm

      Public
      Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
      PowerShell
      1.3k7.5k62Updated Oct 16, 2025Oct 16, 2025
    • STrace

      Public
      A DTrace on Windows Reimplementation
      C++
      4936972Updated Oct 3, 2025Oct 3, 2025
    • vrt-auto

      Public
      Python
      3100Updated Aug 29, 2025Aug 29, 2025
    • flare-floss-testfiles

      Public
      Resources for testing FLOSS by the FLARE team.
      C
      20700Updated Aug 29, 2025Aug 29, 2025
    • flare-emu

      Public
      Python
      14092251Updated Aug 14, 2025Aug 14, 2025
    • ADFSpoof

      Public
      Python
      6940725Updated Jun 5, 2025Jun 5, 2025
    • poisonplug-scatterbrain

      Public
      Deobfuscation library for PoisionPlug.SHADOW's ScatterBrain obfuscator
      Python
      107500Updated Mar 14, 2025Mar 14, 2025
    0