MalwareMechanic

Results 39 comments of MalwareMechanic

@jonanathan Its typical use case is for local VMs, but there's nothing preventing it from being installed on VMs in the cloud. However, we've never tested your use case. I...

@0xtf We've recently added a new requirement for FLARE VM: Chocolatey now requires PowerShell v3 (or higher) and .NET 4.0 (or higher) due to recent upgrades to TLS 1.2. Please...

@mwallner Any thoughts on when a hotfix release can be made so this fix helps reduce the verbose output for everyone using the V3?

@oktaneblu Good catch! Quick search results found some possible alternatives: 1. Developer VM (currently at Win11) 1. Link: https://developer.microsoft.com/en-us/windows/downloads/virtual-machines/ 2. Pro: 1. Pre-built VM suited for many virtualization systems 3....

@Perdyx In terms of testing, I'd like to know: 1. We can reliably disable Windows Defender and Updates (preferably through GPO) where after reboot they are still disabled 2. The...

@chris4a50 provided the link below to Windows VMs hosted on archive.org > These virtual machines were copied to and backed up at the following Internet Archive link: https://archive.org/details/modern.ie-vm

Unfortunately, there's really no "update" feature with the current VMs. @Ana06 if my memory serves, we were in favor of simply performing a fresh install versus supporting official "updates" right?...

@emtuls Could these be added to [`common.vm`](https://github.com/mandiant/VM-Packages/tree/main/packages/common.vm)? It's a package who's purpose is to share functionality for use on any VM flavor. I think it's a good place to add...

I'd vote for the environment variable route to avoid future synchronization issues with different packages. For example, if you update `flare.sysinternals.vm` you will likely have to update `commando.sysinternals.vm` and that...

> One issue I could see with something like adding the specific tools to config.xml might be if someone from either CommandoVM or FlareVM did want to add a specific...