windows-artifacts-generator

Windows Artifacts Generator

Generate malware artifacts for detection tests
Report Bug · Request Feature

:clipboard: Table of content

• :clipboard: Table of content
• :eyes: About the project
  • :question: Why
• :rocket: Getting started
  • :gear: Prerequisites
  • :package: Installation
  • :hammer_and_wrench: Build
  • :ninja: Quick examples
• :construction_worker: Contributing
• :raised_hands: Acknowledgments
• :books: Licenses

:eyes: About the project

Windows Artifacts Generator is a tool for creating malware artifacts for detection tests.

:question: Why

It's useful for testing configurations, rules, or your Endpoint Detection and Response.
It's not intended to fully simulate the behavior of malware but to reproduce the steps that led to artifact creation.
By avoiding full and complex simulations, Windows Artifacts Generator seeks to be simple but nonetheless powerful.

:rocket: Getting started

This is an example of how you can install or build the project yourself.

:gear: Prerequisites

Depending on what you want to achieve, you might need different tools.
For now, you only need Cargo to build or install the project.

:package: Installation

Currently, this project is only available on crates.io.
In order to install it, just enter this command in your favorite terminal:

cargo install windows-artifacts-generator

:hammer_and_wrench: Build

1. Clone the repository

   git clone https://github.com/frack113/WAG/
   

2. Build and run the project!

   cargo run --release
   

After these steps, the application will be in the target directory.

:ninja: Quick examples

Now that WAG is installed, you can start generating some artifacts!
For example, you can create a file like this:

wag actions files create --name "example.txt"

Or you can generate artifacts from a configuration file:

wag generate --file "$YOUR_CONFIGURATIONS_FILE_PATH"

To see more information about what you can do, see the documentation.

:construction_worker: Contributing

Contributions are what make the open source community such an amazing place to learn, inspire, and create.
Any contributions you make are greatly appreciated.

If you want, you can help me with any kind of work, for example:

• Correct my English errors
• Develop features
• Code refactoring
• Licensing stuff

:raised_hands: Acknowledgments

Thanks to all the people who made the logo possible:

• "bug-ant" icon from Heroicons MIT
• "finger-print" icon from Heroicons MIT
• "Beep Sans" font by Agbama Ulimhuka SIL OFL

:books: Licenses

Distributed under the GPL 3.0 or later license.