binskim

BinSkim is a lightweight Portable Executable (PE) scanner designed to validate compiler and linker settings along with other security-related binary characteristics. Its primary use case is to enhance software security through static analysis of binary files, outputting results in the SARIF format. Notable features include support for recursive scanning, customizable analysis configurations, and detailed logging options for execution statistics.