IRMA is an asynchronous and customizable suspect analysis system archives. Το αποθετήριο είναι ένα project του IRMA και περιέχει τον πηγαίο κώδικα για το IRend Frontend, το οποίο είναι μια application που βασίζεται σε Python και παρέχει έναν τρόπο αποθήκευσης της ανάλυσης που πραγματοποιείται από ανιχνευτές, σε μια base data and displays them either through a web client or a CLI-client.
IRMA is an open source platform designed to help detect and analyze malicious files.
Once you install IRMA on your network, the data you stick to it.
Each submitted file is analyzed in different ways. He is currently working with many anti-virus machines, but will add other "detectors".
File analysis process
- An analysis starts when a user uploads files to Frontend.
- Controls it frontend for existing files and results for SQL. If necessary, it saves the new files and calls scan in Brain .
- The program sends secondary tasks to Test (s) when needed.
- The researchers process their work and send the results to Brain .
- Brain sends results to Frontend .
Installation
$ git clone https://github.com/quarkslab/irma $ cd irma $ vagrant up
Command line interface
Web interface
Information on installing and using the program, you will find here.
