flare-vm VS commando-vm

Follow the instructions here to setup a FLARE vm which will have all the tools you need for the labs in the book flare vm

FLARE VM: this is a boxstarter from Mandiant to add a bunch of tools to Windows for malware analysis

build it as a proxmox host and have a malware analysis VM (flare-vm for example - https://github.com/mandiant/flare-vm) you can then interact with it via Console or host another VM as an SSH jump box and ssh tunnel to port 3389 on the malware vm

FLARE VM: a Windows toolkit for malware analysis from Mandiant: https://github.com/mandiant/flare-vm

I usually run it in virtualbox without guest additions, get one of those free windows 10 isos from microsoft and install the mandiant flare vm on it ( https://github.com/mandiant/flare-vm ), after everything is installed i keep a snapshot of the windows machine with everything set up so i dont have to do it all again and once its done i set the network to internal and set set up inetsim on remnux as well if im going to do dynamic analysis so that i have an internet simulator that the malware can talk to.

I use https://any.run for quick stuff or just fire my FlareVM up.

I have a customised version of Windows 10 (https://github.com/mandiant/commando-vm) that I want to be able to install as a base image onto new hard drives.

For a windows based vm I can recommend using commando-vm. https://github.com/mandiant/commando-vm

I highly recommend that you look into Commando VM.

Meanwhile, Fireeye - a 4 Billion US Dollar Cyber Security Company - developed & maintains Commando VM.

I downloaded and messed around with Mandiant's Commando and I thought it was cool how you basically just ran the ps script and it installed and setup everything.

If you wanna use windows for hacking, install this - https://github.com/mandiant/commando-vm, closest thing to a kali linux equiv in windows - Dont use the commando vm with any private data. Its important to isolate your personal computer usage and ethical hacking usage. You could also get hackthebox premium to get your own 24/7 PwnBox which will give you your own virtualised hacking platform for the time being.