IRMA has been designed as a three parts system with the Frontend, the Brain and one or multiple Probes. These components can be installed on a unique or on multiple hosts.
The Frontend and the Brain must be installed on a GNU/Linux system. We recommend to use a Debian 9 distribution which is supported and known to work.
According to the kind of probes and their dependencies, each analyzers can share the same host, as far as they do not interfere with each other, or be installed on separate ones. So forth, only Debian Stable and Microsoft Windows 10 hosts have been tested.
Download pre-packaged appliance
A complete version of IRMA is available as virtual image disk. You can easily import it in Vmware or VirtualBox. The virtual machine utilizes Debian 9, along with irma packages. This demo comes with 1 Linux AV (ClamAV) installed, but additional analyzers may be added as needed. Typical hardware configuration for the demo virtual machine is 2 virtual cpus and 2 GB of ram.
WARNING: This box has been automatically generated with Vagrant. Make sure to change the default credentials (vagrant/vagrant) and "insecure" ssh key before connecting to the network.
irma v2.4.14 3c381399c1698f430821999e708954738ab6a9184da5e151678f45b937ffcdc0
Automated (fast) install
Download and unzip https://github.com/quarkslab/irma/releases/download/v2.4.14-oss/core-v2.4.14-oss.zip
$ cd core-*/ansible $ VM_ENV=allinone_dev vagrant up $ pip install -r requirements.txt (better in a virtualenv) $ python irma-ansible.py environments/allinone_dev.yml playbooks/playbook.yml
WARNING: The automated install cannot be run from Windows due to Ansible limitations.For detailed instructions, please refer to the documentation hosted on readthedocs.org.