Display packages by category in installer

[jstrosch]

Details

Hey all! Have you considered creating a series of custom configurations that could align to "profiles"? For example, a profile that installs just the tools needed for PE file analysis or malicious documents? This could help reduce install time by helping folks avoid installing packages they don't need. I realize there is a way to customize the install, but these profiles can be passed via command line (XML) to help with anyone that wants/needs more automation (or doesn't want to have to manually tweak the install each time). I've created a few as examples at: https://github.com/jstrosch/FLARE-VM-configs/tree/main. Curious to get everyone's thoughts?

[Ana06]

@emtuls recently shared a similar idea with me. I also discussed it with @MalwareMechanic some time ago. But it seems we never created an issue and we didn't have time to work on it. Thanks for documenting the idea @jstrosch!

[heap-s]

@Ana06 Is this something that is being considered still?

[emtuls]

@heap-s Definitely still being considered though it is unfortunately not on our high priority list at the moment.

We do have a plan to work on improving the GUI interface, primarily adding categories and drop down lists to the package list, and if time permits, we would try to squeeze that in as well. :)

[Ana06]

I think organizing tool by categories in the installer UI and allowing to select/unselect all of them would be a nice improvement that addresses this issue and #432. My understanding is that @emtuls is planing to implement this after implementing mandiant/VM-Packages#1107 as we need a good way to access the categories in the installer. @emtuls I'll assign you the issues to ensure others are aware you are working on it.

[necrose99]

winget ui / unigetui one can make a json apps install to get custom pkg adds choco / winget pypi scoop etc..

[Ana06]

@necrose99 can you elaborate on how that would exactly work? Can we customize the UI with a FLARE-VM theme and the packages to use our feed? how would the sorting in categories/profiles exactly work?

[Ana06]

@sara-rn is planing to modify the installer to use https://www.myget.org/F/vm-packages/Packages after she adds the category as tag in the nuspec to display the packages by category and to allow to select a whole category at once. @sara-rn is researching the best way to modify the installer to implement this.

[Ana06]

@jstrosch initial idea was a bit different, but raised the concern that we can make a better job helping the user selecting packages. This is what we are trying to address now in this issue by aiming to display the packages by category and selecting a whole category.

@jstrosch note it is already possible to use the config files you shared in your initial comment with -customConfig https://github.com/jstrosch/FLARE-VM-configs/blob/main/pe-config.xml -customLayout https://github.com/jstrosch/FLARE-VM-configs/blob/main/pe-CustomStartLayout.xml

[necrose99]

@Ana06 the json feed for winget ui / unigetui
you can set in gui , the tool in question , dose winget chocolatey , node.js , pypi, scoop repos..

ie if you install Uniget , you can get all installed on device , and export a json list. via its gui.. , winget or other repos can upgrade the system
i have a list in json to speed up my home/work/and flare-vm pc's on redeployment if stuff goes tits up..

for prototyping pypi package updates against flare-vm tools its fast and shareable , as well the more public choco meta/or .install pkgs visual studio 2022 , or also say cutter

https://community.chocolatey.org/packages/cutter
https://community.chocolatey.org/packages/rizin

or testing apps and links .. i can define my install as one json file and if i share, updates are available , then you'll get them via winget ui / chocolatey etc.