Skip to content
@mandiant

MANDIANT

Pinned Loading

  1. capa capa Public

    The FLARE team's open-source tool to identify capabilities in executable files.

    Python 5.8k 648

  2. flare-vm flare-vm Public

    A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

    PowerShell 8.3k 1.1k

  3. flare-floss flare-floss Public

    FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

    Python 3.8k 513

  4. commando-vm commando-vm Public

    Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

    PowerShell 7.5k 1.3k

  5. Vulnerability-Disclosures Vulnerability-Disclosures Public

    C++ 212 70

Repositories

Showing 10 of 101 repositories
  • harbinger Public
    mandiant/harbinger’s past year of commit activity
    Python 142 Apache-2.0 15 0 17 Updated Jan 26, 2026
  • dncil Public

    The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.

    mandiant/dncil’s past year of commit activity
    Python 170 Apache-2.0 19 2 (1 issue needs help) 2 Updated Jan 26, 2026
  • capa Public

    The FLARE team's open-source tool to identify capabilities in executable files.

    mandiant/capa’s past year of commit activity
    Python 5,782 Apache-2.0 648 249 (7 issues need help) 32 Updated Jan 26, 2026
  • capa-rules Public

    Standard collection of rules for capa: the tool for enumerating the capabilities of programs

    mandiant/capa-rules’s past year of commit activity
    672 Apache-2.0 209 123 (5 issues need help) 7 Updated Jan 26, 2026
  • flare-floss Public

    FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

    mandiant/flare-floss’s past year of commit activity
    Python 3,849 Apache-2.0 513 94 (2 issues need help) 13 Updated Jan 26, 2026
  • gocrack-ui Public

    The User Interface for GoCrack

    mandiant/gocrack-ui’s past year of commit activity
    Vue 88 MIT 50 0 37 Updated Jan 24, 2026
  • stringsifter Public

    A machine learning tool that ranks strings based on their relevance for malware analysis.

    mandiant/stringsifter’s past year of commit activity
    Python 748 Apache-2.0 127 8 3 Updated Jan 23, 2026
  • VM-Packages Public

    Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.

    mandiant/VM-Packages’s past year of commit activity
    PowerShell 214 Apache-2.0 93 108 11 Updated Jan 21, 2026
  • Vulnerability-Disclosures Public
    mandiant/Vulnerability-Disclosures’s past year of commit activity
    C++ 212 70 0 0 Updated Jan 20, 2026
  • flare-gsoc Public

    Supporting resources and documentation for FLARE @ Google Summer of Code 2025

    mandiant/flare-gsoc’s past year of commit activity
    32 Apache-2.0 8 0 1 Updated Jan 20, 2026
View all repositories