search

mandiant / flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
Apache License 2.0
6.37k stars 900 forks source link

[Question] FLARE-VM AMI? #436

Closed HuskyHacks closed 1 year ago

HuskyHacks commented 1 year ago

I wanted to throw this out there to gauge interest. I'm developing the cloud lab lecture material for PMAT and part of the setup is to have the student create their own FLARE-VM AMI and use Terraform to provision and tear down their malware analysis lab.

That got me thinking - is there any interest in maintaining an official FLARE-VM AMI that's publically available on the AMI catalog?

MalwareMechanic commented 1 year ago

Hmm interesting idea! I'd be interested in a GCP option 😄 Do you have any experience in that?

HuskyHacks commented 1 year ago

I don't have any experience with GCP, unfortunately.

I've created a FLARE-VM AMI and made it publically available if anyone wants to check it out for evaluation purposes. It's built on Windows Server 2022 and seems to work great! It's a t2.medium so it costs about $0.04 USD/hour to run the instance and probably about $3/month to maintain the AMI.

ami-0fa27ee2696dde5c9

image

sshakoor98 commented 1 year ago

Hey HuskyHacks, which AWS region is that being hosted on? I can't find it on Asia Pacific.

HuskyHacks commented 1 year ago

@sshakoor98 the AMI is on us-east-1. You have to host AMIs by region and it would get a little expensive to host across the different regions, so I'm keeping it to us-east-1 for now.