{"adoption": {"forks": 472, "observed_at": "2026-08-28T04:06:53.028772+00:00", "stars": 2453}, "canonical_url": "https://ross.abutalabs.com/products/flare-ida", "card": {"archived": true, "artifact_type": "plugin", "description": "IDA Pro utilities from FLARE team", "domain": ["reverse-engineering", "security", "developer-tools"], "enriched": true, "function": ["reverse-engineering", "security", "developer-tools", "parser"], "health_score": 10, "homepage": null, "language": "Python", "license": "Apache-2.0", "license_family": "permissive", "maturity": "active", "member_repos": ["mandiant/flare-ida"], "name": "mandiant/flare-ida", "platform": ["windows", "python", "editor-plugin"], "pushed_at": "2024-10-29T14:38:07+00:00", "repo": "mandiant/flare-ida", "stars": 2453, "tags": ["ida-pro", "idapython", "malware-analysis", "disassembly", "flirt-signatures", "shellcode", "mandiant-flare"], "topics": ["ida", "fireeye-flare", "ida-pro", "idapython", "ida-plugin", "reverse-engineering"], "urls": [], "use_cases": ["search precalculated string hashes used by shellcode in IDA", "recover manually constructed stack strings in malware", "annotate IDA database with MSDN API documentation", "generate FLIRT signatures from an existing IDB", "apply function types to indirect calls", "identify static arguments passed to functions", "apply types to structure fields in IDA"], "what_it_is": "A collection of IDA Pro plugins and IDAPython scripts from Mandiant's FLARE team for reverse engineering and malware analysis. It includes tools for shellcode hash searching, struct typing, stack string recovery, MSDN annotations, FLIRT signature generation, and argument tracking.", "when_to_avoid": ["you don't use IDA Pro", "you need a standalone disassembler or decompiler", "you work exclusively with Ghidra or Binary Ninja"], "when_to_choose": ["you analyze malware or unknown binaries in IDA Pro", "you want battle-tested reversing plugins from an expert team", "you need to identify library functions via FLIRT signatures", "you want to enrich IDB databases with API documentation"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/flare-ida", "repo": "mandiant/flare-ida", "role": "main", "score": 10}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:06:53.028772+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T02:30:09.301506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "252cd8339f01ce4212a270f8c34af54461c1be2d198758a049c3f80bc7008025", "fetched_at": "2026-08-28T04:06:53.028772+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mandiant/flare-ida"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:06:53.028772+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T02:30:09.301506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "252cd8339f01ce4212a270f8c34af54461c1be2d198758a049c3f80bc7008025", "fetched_at": "2026-08-28T04:06:53.028772+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mandiant/flare-ida"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T02:30:09.301506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "252cd8339f01ce4212a270f8c34af54461c1be2d198758a049c3f80bc7008025", "fetched_at": "2026-08-28T04:06:53.028772+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mandiant/flare-ida"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:06:53.028772+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:06:53.028772+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:06:53.028772+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T02:30:09.301506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "252cd8339f01ce4212a270f8c34af54461c1be2d198758a049c3f80bc7008025", "fetched_at": "2026-08-28T04:06:53.028772+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mandiant/flare-ida"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:06:53.028772+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:06:53.028772+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T02:30:09.301506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "252cd8339f01ce4212a270f8c34af54461c1be2d198758a049c3f80bc7008025", "fetched_at": "2026-08-28T04:06:53.028772+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mandiant/flare-ida"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:06:53.028772+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:06:53.028772+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:06:53.028772+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T02:30:09.301506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "252cd8339f01ce4212a270f8c34af54461c1be2d198758a049c3f80bc7008025", "fetched_at": "2026-08-28T04:06:53.028772+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mandiant/flare-ida"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:06:53.028772+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:06:53.028772+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T02:30:09.301506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "252cd8339f01ce4212a270f8c34af54461c1be2d198758a049c3f80bc7008025", "fetched_at": "2026-08-28T04:06:53.028772+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mandiant/flare-ida"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T02:30:09.301506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "252cd8339f01ce4212a270f8c34af54461c1be2d198758a049c3f80bc7008025", "fetched_at": "2026-08-28T04:06:53.028772+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mandiant/flare-ida"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T02:30:09.301506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "252cd8339f01ce4212a270f8c34af54461c1be2d198758a049c3f80bc7008025", "fetched_at": "2026-08-28T04:06:53.028772+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mandiant/flare-ida"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T02:30:09.301506+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "252cd8339f01ce4212a270f8c34af54461c1be2d198758a049c3f80bc7008025", "fetched_at": "2026-08-28T04:06:53.028772+00:00", "kind": "readme", "missing": false, "url": "https://github.com/mandiant/flare-ida"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_releases", "archived"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 4417, "days_push": 673, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 10, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}