What problem does it solve?
IDA-Skill automates malware reverse engineering by extracting disassembly, decompiled code, imports, strings, and cross-references from IDA Pro via IDAPython to provide structured analysis outputs for security investigations.
Core Features & Use Cases
- Automates static malware analysis with IDA Pro, producing structured insights including C2 indicators, strings, imports, and cross-references.
- Generates threat artifacts such as YARA rules and export/import analyses for red-teaming and blue-team workflows.
- Real-world use: analyze a sample binary to rapidly compile a report summarizing its behavior and indicators (IOCs).
Quick Start
Run the initialization script to analyze a binary: python skills/IDA-Skill/tools/init_analysis.py target.exe to generate analysis.txt, imports.txt, and strings_use_subagent_to_analyse.txt.