IRMA: Incident Response & Malware Analysis

IRMA is an asynchronous and customizable analysis system for suspicious files. This repository is a subproject of IRMA and contains the source code for IRMA's Probes, which are python-based application that host a single or multiple analyzers. Thanks for checking it out.

Documentation

All documentation is in the docs directory. If you are just getting started, here is how we recommend you read the docs:

1. First, build the documentation with sphinx (in the docs directory, do make html).
2. Next, open the documentation in your favorite web browser. The documentation is generated in _build/html. You can open, for instance, _build/html/index.html as a starting point.
3. Go through the documentation.

We are trying to do your best to update the documentation regularly. If you find any problems in the documentation, or think they should be clarified in any way, please take 30 seconds to fill out a ticket.

Getting help

Join the #qb_irma channel on irc.freenode.net. Lots of helpful people hang out there.

Contribute to IRMA

IRMA is an ambitious project. Make yourself known on the #irma_qb channel on irc.freenode.net. We will be please to greet you and to find a way to get you involved in the project.