{
  "added_at": "2026-11-06",
  "additional_evidence_urls": [
    "https://github.com/hamodywe/imprint/blob/b63df337336333e9db566144fdb8ffea056c6a89/docs/architecture.md"
  ],
  "category": "native-analysis",
  "description_en": "imprint analyzes Windows PE files by parsing import, delay-import and export directories without executing the image. It maps imported Windows APIs to categories and MITRE ATT&CK techniques, then reports capability patterns with the imports that triggered each finding in text or JSON.",
  "description_zh": "imprint 不执行映像，直接解析 Windows PE 文件的导入、延迟导入和导出目录。它把导入的 Windows API 映射到行为类别与 MITRE ATT&CK 技术，再以文本或 JSON 输出能力模式及触发依据。",
  "entry_url": "https://awesomerea.org/resources/imprint-pe-triage/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/imprint-pe-triage/",
  "evidence_url": "https://github.com/hamodywe/imprint/blob/b63df337336333e9db566144fdb8ffea056c6a89/README.md",
  "group": "tools",
  "id": "imprint-pe-triage",
  "json_url": "https://awesomerea.org/resources/imprint-pe-triage/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/imprint-pe-triage/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/imprint-pe-triage/index.md",
  "name": "imprint",
  "name_zh": "imprint PE 导入表静态分析工具",
  "record_type": "resource",
  "relationship": "foundation",
  "requirement_facets": [
    "prerequisites",
    "limits",
    "license"
  ],
  "requirements": [
    "A C11 compiler such as gcc, clang or MinGW is required to build it.",
    "Imports indicate possible capabilities, not observed execution; dynamically resolved APIs and packed payloads may be hidden.",
    "MIT license."
  ],
  "requirements_zh": [
    "构建需要 gcc、clang 或 MinGW 等 C11 编译器。",
    "导入表只能提示可能的能力，不能证明代码已经执行；动态解析的 API 和加壳载荷可能不可见。",
    "采用 MIT 许可证。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/hamodywe/imprint",
  "verification": "source-reviewed",
  "verified_at": "2026-11-06"
}