Skip to content
@mandiant

MANDIANT

Pinned Loading

  1. capa capa Public

    The FLARE team's open-source tool to identify capabilities in executable files.

    Python 5.6k 624

  2. flare-vm flare-vm Public

    A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

    PowerShell 7.9k 1k

  3. flare-floss flare-floss Public

    FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

    Python 3.8k 497

  4. commando-vm commando-vm Public

    Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

    PowerShell 7.4k 1.3k

  5. Vulnerability-Disclosures Vulnerability-Disclosures Public

    C++ 210 68

Repositories

Showing 10 of 100 repositories
  • capa Public

    The FLARE team's open-source tool to identify capabilities in executable files.

    mandiant/capa’s past year of commit activity
    Python 5,618 Apache-2.0 624 241 (8 issues need help) 32 Updated Oct 29, 2025
  • harbinger Public
    mandiant/harbinger’s past year of commit activity
    Python 126 Apache-2.0 13 0 1 Updated Oct 29, 2025
  • dncil Public

    The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.

    mandiant/dncil’s past year of commit activity
    Python 168 Apache-2.0 19 2 (1 issue needs help) 2 Updated Oct 28, 2025
  • capa-rules Public

    Standard collection of rules for capa: the tool for enumerating the capabilities of programs

    mandiant/capa-rules’s past year of commit activity
    641 Apache-2.0 198 114 (4 issues need help) 10 Updated Oct 28, 2025
  • capa-testfiles Public

    Data to test capa's code and rules.

    mandiant/capa-testfiles’s past year of commit activity
    Max 46 Apache-2.0 79 0 6 Updated Oct 28, 2025
  • flare-floss Public

    FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

    mandiant/flare-floss’s past year of commit activity
    Python 3,752 Apache-2.0 497 98 (2 issues need help) 12 Updated Oct 28, 2025
  • Vulnerability-Disclosures Public
    mandiant/Vulnerability-Disclosures’s past year of commit activity
    C++ 210 68 0 0 Updated Oct 28, 2025
  • brickstorm-scanner Public
    mandiant/brickstorm-scanner’s past year of commit activity
    Shell 63 12 0 0 Updated Oct 27, 2025
  • VM-Packages Public

    Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.

    mandiant/VM-Packages’s past year of commit activity
    PowerShell 203 Apache-2.0 88 109 16 Updated Oct 22, 2025
  • commando-vm Public

    Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

    mandiant/commando-vm’s past year of commit activity
    PowerShell 7,389 Apache-2.0 1,334 6 2 Updated Oct 16, 2025
View all repositories