mandiant/flare-vm resource

Health v2 · maintenance only

Adoption not part of the score

8965 stars · 1106 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

FLARE-VM is a collection of PowerShell installation scripts that set up and maintain a reverse engineering and malware analysis environment on a Windows virtual machine. It uses Chocolatey and Boxstarter to automate the curated installation of dozens of reverse engineering tools.

Use cases

• set up a windows vm for malware analysis
• install reverse engineering tools automatically
• build a repeatable reverse engineering environment
• curate a malware analysis toolkit
• provision a fresh analysis vm after each investigation
• keep reverse engineering tools up to date on windows

When to choose

• you need a dedicated Windows VM for reverse engineering or malware analysis
• you want scripted, repeatable installation of a curated RE toolset
• you regularly rebuild analysis VMs and want to save setup time

When to avoid

• you want to install it on your daily-driver host system (it disables security features and is VM-only)
• you do not use Windows
• you need only one or two specific tools rather than a full environment

Facets

infra-config · maturity active

developer-tools reverse-engineering security configuration-management cli reverse-engineering security developer-tools windows windows cli malware-analysis powershell chocolatey boxstarter virtual-machine flare environment-setup tooling docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="mandiant/flare-vm")