mandiant / VM-Packages

Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

7zip Easy Unzip Improvements

nadrojisk opened this issue · comments

Details

Details

I suggest:

  • At the moment there is a handy unzip with "infected" right click context menu that utilizes 7zip. I suggest changing it to the following:
 VM-Add-To-Right-Click-Menu $toolName 'unzip "infected"' "`"$7zExecutablePath`" x -pinfected `"%1`"" "$executablePath" -extension $extension
  • I suggest swapping e to x as it extract with full paths. Sometimes there are nested directories within a ZIP and it can be cumbersome if those are just flattened upon extracting.
  • I think it would also be great to extract the archive into a directory with its same name similar to how when you right click an archive it says extract to [Archive Name]\

@nadrojisk thanks your sharing your improvement ideas!

I suggest swapping e to x as it extract with full paths. Sometimes there are nested directories within a ZIP and it can be cumbersome if those are just flattened upon extracting.

I agree with this one!

I think it would also be great to extract the archive into a directory with its same name similar to how when you right click an archive it says extract to [Archive Name]\

  • How do you propose to implement this? The -o option allows to provide a directory name, but I am not sure how to get the zip name in the registry command. At the moment we use the argument %1.

  • Most of the zips with infected password I use are just a single malware binary zipped or a folder inside a zip. In both cases, I would personally find the extra directory annoying. @mandiant/flare-vm what do others think?

Agreed on using x. No hard feelings on adding an outer directory.

Agreed on using x. No hard feelings on adding an outer directory.

No hard feelings at all :) Thanks for adding the x change though, you all are great!