search

mandiant / flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
Apache License 2.0
6.45k stars 906 forks source link

Creation of installation "profiles"? #578

Open jstrosch opened 6 months ago

jstrosch commented 6 months ago

Details

Hey all! Have you considered creating a series of custom configurations that could align to "profiles"? For example, a profile that installs just the tools needed for PE file analysis or malicious documents? This could help reduce install time by helping folks avoid installing packages they don't need. I realize there is a way to customize the install, but these profiles can be passed via command line (XML) to help with anyone that wants/needs more automation (or doesn't want to have to manually tweak the install each time). I've created a few as examples at: https://github.com/jstrosch/FLARE-VM-configs/tree/main. Curious to get everyone's thoughts?

Ana06 commented 6 months ago

@emtuls recently shared a similar idea with me. I also discussed it with @MalwareMechanic some time ago. But it seems we never created an issue and we didn't have time to work on it. Thanks for documenting the idea @jstrosch!

heap-s commented 1 month ago

@Ana06 Is this something that is being considered still?

emtuls commented 3 weeks ago

@heap-s Definitely still being considered though it is unfortunately not on our high priority list at the moment.

We do have a plan to work on improving the GUI interface, primarily adding categories and drop down lists to the package list, and if time permits, we would try to squeeze that in as well. :)

Ana06 commented 4 days ago

I think organizing tool by categories in the installer UI and allowing to select/unselect all of them would be a nice improvement that addresses this issue and https://github.com/mandiant/flare-vm/issues/432. My understanding is that @emtuls is planing to implement this after implementing https://github.com/mandiant/VM-Packages/issues/1107 as we need a good way to access the categories in the installer. @emtuls I'll assign you the issues to ensure others are aware you are working on it.