Integrating Third-Party Tools
MalChela supports the integration of external tools such as Python-based utilities (oletools
, oledump
) and high-performance YARA engines (yara-x
). These tools expand MalChela’s capabilities beyond its native Rust-based toolset.
Tools now require
exec_type
(e.g.,cargo
,binary
,script
) to define how they are launched, andfile_position
to clarify argument order when needed.
To integrate a new tool into the GUI, ensure the tool:
- Accepts CLI arguments in the form toolname [args] [input]
- Outputs results to stdout
- Is installed and available in $PATH
- name: toolname
description: “Short summary of tool purpose”
command: [“toolname”]
input_type: file # or folder or hash
category: “File Analysis” # or other GUI category
optional_args: []
exec_type: binary # or cargo / script
file_position: last # or first, if required
You can switch to a prebuilt
tools.yaml
for REMnux mode via the GUI configuration panel — useful for quick setup in forensic VMs.