XRefer is a new tool that provides a persistent companion view to assist analysts in navigating and understanding binaries.
At its core, XRefer offers two complementary navigation paradigms: Gemini-powered cluster analysis and a context-aware view.
XRefer can optionally encode cluster information directly into IDA's interface by prefixing function names.
XRefer provides unified search functionality across all artifact types directly within the function context table view.
XRefer supports artifact exclusion to reduce noise when analyzing large, complex binaries.
XRefer has a specialized Rust-specific language module that extracts strings and library usage information.
XRefer has been primarily tested with Windows binaries.
XRefer is now available as an open-source tool in Mandiant's GitHub repository.
Immediate areas for future development include extending cluster analysis to include code submissions and adding support for other language modules.
Special thanks to Genwei Jiang and Mustafa Nasser for their code contributions to XRefer and to Ana Martinez Gomez for including XRefer in the default FLARE-VM configuration.