MANDIANT Red Curtain (MRC) is software for Incident Responders that analyzes executable files (for example, .exe, or .dll) to determine how suspicious they are based on a set of criteria. It examines multiple aspects of a file, looking at things such as the entropy, compiler and packing signatures, the presence of digital signatures, and other characteristics to generate a threat "score." This score can be used to identify whether a set of files is worthy of further investigation. MRC analyzes files you wish to examine, producing an XML report detailing its analysis. The user interface displays reports in a grid, much like a spreadsheet, allowing you to sort on various columns contained in the report, cut/paste results to other applications, or export results in a non-XML format, such as comma-separated value (CSV).
Requirements:
Windows XP/2003 Server
Comments not found