Repository navigation
Horus v3.0.0
Same engine, three ways to run it — and a GUI that finally does the analysis justice.
Downloads
- horus.exe — unified build: CLI by default,
--gui(or a double-click) opens the glass console. - horus-cli.exe — pure command line, zero third-party dependencies.
- horus-gui.exe — drag a file on it for the glass-console report.
What's new
- Glass console (GUI) — a self-contained glassmorphism report: risk ring, a live threat graph wiring the sample to its capabilities / ATT&CK / embedded IOCs, and an ATT&CK heatmap. Inline HTML/CSS/JS, no CDN, nothing leaves the box. Also
horus --html report.htmlto export one. --scan <dir>— folder triage, worst-first, with--csv/--json-out.--diff a.exe b.exe— imphash, rich-hash, section-entropy drift, TLSH distance.--clip— read the indicator off the clipboard.~/.horus.json— keep keys + acache_ttl_hours; repeat intel lookups come from a local cache.- Version resource + manifest on every binary to cut AV false positives (see
docs/false-positive-report.md).
The --json contract from v2.1 is unchanged, so existing scripts keep working.