Skip to content
@mandiant

MANDIANT

Pinned Loading

  1. capa capa Public

    The FLARE team's open-source tool to identify capabilities in executable files.

    Python 6.2k 724

  2. flare-vm flare-vm Public

    A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

    PowerShell 9k 1.1k

  3. flare-floss flare-floss Public

    FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

    Python 4.1k 542

  4. commando-vm commando-vm Public

    Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

    PowerShell 7.8k 1.4k

  5. Vulnerability-Disclosures Vulnerability-Disclosures Public

    C++ 222 71

Repositories

Showing 10 of 104 repositories
  • speakeasy Public

    Windows kernel and user mode emulation.

    mandiant/speakeasy's past year of commit activity
    Python 2,043 MIT 288 13 (1 issue needs help) 2 Updated Sep 9, 2026
  • capa Public

    The FLARE team's open-source tool to identify capabilities in executable files.

    mandiant/capa's past year of commit activity
    Python 6,177 Apache-2.0 723 250 (8 issues need help) 48 Updated Sep 8, 2026
  • capa-rules Public

    Standard collection of rules for capa: the tool for enumerating the capabilities of programs

    mandiant/capa-rules's past year of commit activity
    735 Apache-2.0 245 124 (5 issues need help) 14 Updated Sep 8, 2026
  • flare-floss Public

    FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

    mandiant/flare-floss's past year of commit activity
    Python 4,146 Apache-2.0 542 104 (3 issues need help) 7 Updated Sep 8, 2026
  • macos-UnifiedLogs Public

    A cross platform parser for Apple UnifiedLogs!

    mandiant/macos-UnifiedLogs's past year of commit activity
    Rust 375 Apache-2.0 44 11 4 Updated Sep 3, 2026
  • VM-Packages Public

    Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.

    mandiant/VM-Packages's past year of commit activity
    PowerShell 245 Apache-2.0 98 101 4 Updated Sep 2, 2026
  • dncil Public

    The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.

    mandiant/dncil's past year of commit activity
    Python 180 Apache-2.0 20 2 (1 issue needs help) 5 Updated Aug 31, 2026
  • Vulnerability-Disclosures Public
    mandiant/Vulnerability-Disclosures's past year of commit activity
    C++ 222 71 0 0 Updated Aug 18, 2026
  • gopacket Public

    A complete Go port of Impacket - 63 CLI tools and 24 libraries for Windows & Active Directory protocol attacks, compiled to a single dependency-free binary.

    mandiant/gopacket's past year of commit activity
    Go 708 Apache-2.0 62 2 3 Updated Aug 18, 2026
  • capa-testfiles Public

    Data to test capa's code and rules.

    mandiant/capa-testfiles's past year of commit activity
    Python 49 Apache-2.0 90 0 7 Updated Aug 17, 2026
View all repositories