| Description: |
"MANDIANT Red Curtain
is free software for Incident Responders that assists with the
analysis of malware. MRC examines executable files (e.g., .exe, .dll,
and so on) to determine how suspicious they are based on a set of
criteria. It examines multiple aspects of an executable, looking at
things such as the entropy (in other words, randomness), indications
of packing, compiler and packing signatures, the presence of digital
signatures, and other characteristics to generate a threat "score."
This score can be used to identify whether a set of files is worthy
of further investigation." |