PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Irma Past and Future

blog.quarkslab.com | research | #open-source | #malware | #roadmap | #irma | #file-analysis | #software
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A retrospective on three years of Irma development: the Python 2 to 3 migration, new frameworks, reusable modules, and an introduction to the future roadmap of the file analysis solution.
Published
Collected

Related coverage

research · volexity.com
GoResolver: Using Control-flow Graph Similarity to Deobfuscate Golang Binaries, Automatically
# GoResolver: Using Control-flow Graph Similarity to Deobfuscate Golang Binaries, Automatically April 1, 2025 Killian Raimbaud and Paul Rascagneres In the course of its investigations, Volexity...
research · blog.quarkslab.com
IRMA v1.3.0
IRMA 1.3.0 brings a standalone irma-cli Python module, file tagging, MIME-based automatic probe selection and probe-generated files to the privacy-focused open-source malware analysis framework.
research · blog.quarkslab.com
HiTB Challenge: IRMA - Results
Results of the IRMA development challenge: binhxe's Outlook attachment-scanning plugin took first place with 7 points, vrasneur's ICAP probe second with 5, winning tickets plus travel expenses.
research · blog.quarkslab.com
HiTB Challenge: IRMA
Quarkslab's HITB challenge invites contributions to IRMA, its open-source incident-response and malware-analysis framework: write a probe or submitter to win tickets; deadline May 8, 2015.
research · aikido.dev
Novel supplychain.local Go worm appears
On 23 September 2026, a threat actor published a novel supply chain worm to the following packages:
research · eshard.com
Record Malware Execution in a Single Prompt with Epoch
Record malware execution from its first instruction with a single prompt: an LLM isolates the VM, drops the binary, records it and indexes the trace in Epoch.
Back