TECHINT Tools

The kit the operator reaches for in TECHINT collection and analysis. Tooling rotates; the headings hold as the capabilities the operator needs covered.

Tool	Purpose
ghidra	NSA reverse-engineering suite; standard for binary analysis.
ida pro	Commercial disassembler / decompiler.
binwalk	Firmware extraction and signature scan.
radare2 / rizin / cutter	Open-source RE platform.
capa	Identify capabilities in unknown binaries.
yara	Match patterns across binaries for family classification.
angr	Symbolic execution for control-flow recovery.
volatility / rekall	Memory forensics.
autopsy / sleuthkit	Disk forensics.

References

• TECHINT for the discipline overview.

• TECHINT Sources for the data sources.

• TECHINT Techniques for the tradecraft.