Nemesis_analyst

Static + dynamic malware analysis for Windows. Deep static triage (entropy map, multi-stage strings, code patterns, imports, capabilities)

A new way for AI to search for data
View on GitHub
2GitHub stars

Python, Lua

What XERJ indexed

Snapshot

Whole repository

The whole repository at commit 8c32bd4f4c (2026-10-21).

Selected work

“v1.0: public release: MCP server, cleaner reports, docs”. 56 files, 7,005 lines in nanalyst, tests, the project root.

Licence

The repository

MIT

Checked by a person at the pinned commit.

The XERJ corpus

MIT, with credit

The author agreed by email on 2026-10-22. Same terms as the repository. Answers name the repo, the commit and the file:line.

in licence reviewnot in the hub yetsuggested use: adapt with attribution

deobfuscationdfirdynamic-analysisincident-responseiocsmalwaremalware-analysismcp

Example questions

The prompt

Paste it into your AI agent. It clones eobi/Nemesis_analyst at the pinned commit and indexes it on your machine.

Search the GitHub repository eobi/Nemesis_analyst with XERJ (https://hub.xerj.org/corpus/eobi--nemesis-analyst).
Run these in a shell, in order, and check each result before the next:
1. xerj --help  (success: it prints usage). If xerj is missing: curl -fsSL https://xerj.org/get | sh
2. git clone https://github.com/eobi/Nemesis_analyst Nemesis_analyst && git -C Nemesis_analyst checkout 8c32bd4f4cdc5e55ac2ca5421fb71d36cbf62e6e
3. Start a local node and leave it running: xerj --insecure --data-dir ./xerj-data
4. xerj autoindex ./Nemesis_analyst --url http://127.0.0.1:9200 --prefix nemesis-analyst --progress plain
5. xerj autoindex map --url http://127.0.0.1:9200
Then answer my question from the indexed files and cite the ax_path of every hit. Query syntax: https://xerj.org/llms.txt
Licence: MIT. Keep the copyright notice and credit the authors.

Related

Selected work and consent: the XERJ registry.