Capa is an open-source tool from Mandiant that automatically analyzes executable files to identify capabilities, behaviors, and malware functionality based on rule-driven pattern matching.