winget install --id=horsicq.DIE-engine -e
Detect It Easy, or abbreviated "DIE" is a program for determining types of files.
Detect It Easy (DiE) is a program designed to determine file types through signature-based and heuristic analysis. It supports multiple platforms, including Windows, Linux, and macOS, making it versatile for various environments.
Key Features:
Audience & Benefit: Ideal for cybersecurity professionals, malware analysts, reverse engineers, and software developers who need precise file type identification. DiE helps in analyzing unknown files, detecting packers or protections, and conducting security audits with minimal false positives. Its ability to handle both known and unrecognized formats makes it a valuable tool for digital forensics and static analysis.
Installation: Detect It Easy can be installed via winget on Windows, ensuring easy setup for users.
Detect It Easy (DiE) is a powerful tool for file type identification, popular among malware analysts, cybersecurity experts, and reverse engineers worldwide. Supporting both signature-based and heuristic analysis, DiE enables efficient file inspections across a broad range of platforms, including Windows, Linux, and MacOS. Its adaptable, script-driven detection architecture makes it one of the most versatile tools in the field, with a comprehensive list of supported OS images.
Detect It Easyβs flexible signature system and scripting capabilities make it an essential tool for malware analysis and digital forensics. With traditional static analyzers often limited in scope and prone to false positives, DiEβs customizable design enables precise integration of new detection logic, ensuring reliable results across diverse file types.
Detect It Easy supports a wide range of executable and archive types, including:
And that's not all... The list is expanding as the tool is updated
Unknown formats undergo heuristic analysis, providing identification for both known and unrecognized files.
Windows:
Linux:
detect-it-easy
> [!NOTE] > Use Detect It Easy bot via Telegram to quickly check files: @detectiteasy_bot
See the BUILD.md for detailed instructions.
Run DiE in a Docker container:
git clone --recursive https://github.com/horsicq/Detect-It-Easy
cd Detect-It-Easy/
docker build . -t horsicq:diec
Detect It Easy offers three versions:
For detailed usage, refer to the RUN.md.
Thanks to all contributors!
Thanks to DosX
Thanks to PELock