Binary Triage (Phase 1) Purpose Quick fingerprinting to establish baseline facts before deeper analysis. Runs in seconds, not minutes. When to Use - First contact with an unknown binary - Need architecture/ABI info for tool selection - Quick capability assessment - Before committing to expensive analysis Key Principle Gather facts fast, defer analysis. This phase identifies WHAT the binary is, not HOW it works. Triage Sequence Step 1: File Identification Extract: - Architecture (ARM, ARM64, x86 64, MIPS) - Bit width (32/64) - Endianness (LSB/MSB) - Link type (static/dynamic) - Interpreter pat…