---
id: 4564
title: "Writing your own Analyzer for the Open-Source Multi-Scanner IRMA"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/writing-our-own-analyzer-for-the-open-source-multi-scanner-irma.html"
published_at: "2015-02-22T23:00:00Z"
tags: ["open-source", "malware-analysis", "tutorial", "irma", "probe"]
phying_url: "https://phying.com/item/4564"
lang: en
---

# Writing your own Analyzer for the Open-Source Multi-Scanner IRMA

## Summary

Step-by-step guide to writing a new IRMA probe, using a TrID file-type module as the example: setting up the dev environment with Vagrant and Ansible, then contributing the analyzer upstream.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2015-02-22T23:00:00Z
- **Original:** https://blog.quarkslab.com/writing-our-own-analyzer-for-the-open-source-multi-scanner-irma.html
- **Phying News:** https://phying.com/item/4564