ida-spotlight

IDA Spotlight is a plugin for IDA Pro designed to enhance the efficiency of malware analysis by automatically scoring and prioritizing functions within large binaries, allowing analysts to triage thousands of functions rapidly. It features advanced scoring based on multiple signal categories such as API calls and string references, as well as historical sample correlation, enabling quick identification of the most critical functions for in-depth review. Notably, it incorporates a dual-view workflow and maintains a SQLite knowledge base for correlating new samples with previously analyzed data, streamlining the analysis process.