rizin

rizin -A <sample>

Opens a binary in rizin with automatic analysis, the modern fork of radare2 for console reverse engineering.

Run it when you need console RE with the modern tool: rizin is the fork of radare2 (it came out of the original project) with the same approach — automatic analysis (-A), disassembly, cross-references, and strings — plus usability and stability improvements. For the analyst who works in the console or automates (rz-pipe, scripts), rizin is the current choice. In IR, rizin covers the same ground as radare2: understanding malware logic when superficial static analysis isn't enough.

Don't use it if you already master radare2 and it works for you: the differences are ecosystem, not capability — switching tools doesn't add value if your current flow covers the need. The rizin console (like r2's) is harsh for the uninitiated: for GUI analysis, Ghidra is more accessible. And the limits shared with all static RE: obfuscated or packed code requires prior unpacking, and real behavior is confirmed with the sandbox. For triage, rizin isn't the tool — DIE, strings, and peframe first.