Add more useful tools to Flare default #584
Conversation
There was a problem hiding this comment.
What about adding pdbresym.vm from mandiant/VM-Packages#993 as well? (we can do it in a separate PR too)
@mandiant/flare-vm any other package we should add?
| @@ -39,6 +41,7 @@ | |||
| <package name="hashmyfiles.vm"/> | |||
| <package name="hollowshunter.vm"/> | |||
| <package name="hxd.vm"/> | |||
| <package name="ida.diaphora.vm"/> | |||
There was a problem hiding this comment.
I like this tool and would like it in the VM. But it just copies the file into the VM instead of installing it as plugin. I thought this may be confusing and that's the reason it hasn't been added to the default config before. There is an issue to explore installing it as a plugin: mandiant/VM-Packages#994 Should we wait for that or would you prefer to add the current version now?
There was a problem hiding this comment.
I think adding it now is fine, since it isn't effecting anything and gives the user the ability to play with it in its current state while also allowing it to be updated in the future if the package changes, without us needing to modify this config again. :)
There was a problem hiding this comment.
we would need to change the config as the name of the package would change, but is not a big thing. 😄
config.xml
Outdated
| <package name="processdump.vm"/> | ||
| <package name="reg_export.vm"/> | ||
| <package name="regcool.vm"/> |
There was a problem hiding this comment.
We should remove regcool as it is broken at the moment: mandiant/VM-Packages#1004
Add useful recently introduced packages to the FLARE-VM default configuration.
No description provided.