security-dossier

To generate a security dossier, provide a target function name from your analysis DB and run the build_dossier script. This automates the gathering of the function's security posture, including identity, reachability, and dangerous operations, into a structured report.

Function reachability analysis determines which code paths can access a specific function within decompiled binaries. This security dossier aggregates reachability alongside identity, data exposure, and neighboring context to assess the overall module security posture.

This tool specifically satisfies data sourcing from per-function analysis DBs, such as DeepExtractIDA outputs. You need a target function name from these compatible databases to successfully generate the security dossier.

The best way to audit untrusted data exposure is to run the build_dossier script on a target function. It consolidates data exposure metrics, dangerous operations, and complexity metrics into a machine-readable JSON or human-friendly report for streamlined reviews.

The security dossier includes both individual function details and module security posture. It aggregates identity, resources, complexity, and neighboring context to guide remediation and review across module analyses.

Generation fails if the provided target function name does not exist within the per-function analysis DBs. Ensure your database contains the necessary decompiled code outputs and security features before running the build_dossier script.