Skip to content

Horus v3.0.0

Choose a tag to compare

@mobinert mobinert released this 18 Jul 09:43
· 4 commits to master since this release

Same engine, three ways to run it — and a GUI that finally does the analysis justice.

Downloads

  • horus.exe — unified build: CLI by default, --gui (or a double-click) opens the glass console.
  • horus-cli.exe — pure command line, zero third-party dependencies.
  • horus-gui.exe — drag a file on it for the glass-console report.

What's new

  • Glass console (GUI) — a self-contained glassmorphism report: risk ring, a live threat graph wiring the sample to its capabilities / ATT&CK / embedded IOCs, and an ATT&CK heatmap. Inline HTML/CSS/JS, no CDN, nothing leaves the box. Also horus --html report.html to export one.
  • --scan <dir> — folder triage, worst-first, with --csv / --json-out.
  • --diff a.exe b.exe — imphash, rich-hash, section-entropy drift, TLSH distance.
  • --clip — read the indicator off the clipboard.
  • ~/.horus.json — keep keys + a cache_ttl_hours; repeat intel lookups come from a local cache.
  • Version resource + manifest on every binary to cut AV false positives (see docs/false-positive-report.md).

The --json contract from v2.1 is unchanged, so existing scripts keep working.