Virtual Machine Packages
This repository contains the source code for packages supporting the following analysis environment projects:
Packages do not contain actual software distributions. Packages are PowerShell scripts that only contain instructions for obtaining and configuring tools. See Chocolatey legal information for more details.
How does this work?
The packages stored in this repository are automatically built and pushed to a public package feed hosted on myget.org. From this feed FLARE VM and our other binary analysis environments download packages and execute the included scripts to install tools.
The installation of packages relies on Chocolatey.
Contributing
To propose new tools, to report problems, and to suggest improvements please open a new issue. Ensure you select the correct issue type and provide all the requested information.
Please see the Wiki for documentation on how to create a package using our established best practices.
Open Source Packages
Open sourcing the installation packages allows the community to not only suggest new tools, improvements, and report bugs, but to help implement them. It's now very transparent how and what gets installed. Moreover, we can use GitHub Actions (free for open-source repositories) for testing and automations. This reduces manual maintenance and simplifies contributions.
Automation
Once a package is submitted, our pull request automations test the package to see if it builds and installs correctly. Additionally, we use GitHub Actions to build and test each package on a daily basis to check for any errors (see Daily Failures Wiki page). Simply being aware of broken packages should quickly solve a lot of problems VM users faced in the past.