Radare2 Power Ups | Delivering Faster macOS Malware Analysis With r2 Customization

In previous posts, we’ve explored how analysts can use radare2 (aka r2) for macOS malware triage, work around anti-analysis tricks, decrypt encrypted strings, and generate function signatures and YARA rules. Like most reversing tools, radare2 can be customized and extended to increase the analyst’s productivity and make analysis and triage much faster.

In this fifth post in the series, we look at some effective ways to power up r2, providing practical examples to get you …

analysis analyst analysts anti-analysis customization decrypt encrypted function macos macos malware malware malware analysis power productivity radare2 reversing rules signatures strings tools triage ups work yara yara rules