hartl3y94/vm-packages

Virtual Machine Packages

This repository contains the source code for packages supporting the following analysis environment projects:

• FLARE VM
• CommandoVM
• ThreatPursuit VM

Packages do not contain actual software distributions. Packages are PowerShell scripts that only contain instructions for obtaining and configuring tools. See Chocolatey legal information for more details.

How does this work?

The packages stored in this repository are automatically built and pushed to a public package feed hosted on myget.org. From this feed FLARE VM and our other binary analysis environments download packages and execute the included scripts to install tools.

The installation of packages relies on Chocolatey.

Contributing

To report problems or to suggest new tools please open a new Issue.

Please see the Wiki for documentation on how to create a package using our established best practices.

Open Source Packages

Open sourcing the installation packages allows the community to not only suggest new tools, improvements, and report bugs, but to help implement them. It's now very transparent how and what gets installed. Moreover, we can use GitHub Actions (free for open-source repositories) for testing and automations. This reduces manual maintenance and simplifies contributions.

Automation

Once a package is submitted, our pull request automations test the package to see if it builds and installs correctly. Additionally, we use GitHub Actions to build and test each package on a daily basis to check for any errors. Simply being aware of broken packages should quickly solve a lot of problems VM users faced in the past.