Collaborate Disseminate
Can anyone tell me whether this technology is similar to having a tiny OS or a miniature OS sandboxing an application ? How does this technology intercept file system calls and registry calls by exploits that take advantage … Continue reading Micro-Virtualization
We are using the Cuckoo API to send some files/URLS for analysis. As the volume of these requests can go up quite quickly, I was wondering if there is a limit on the Cuckoo “task_id” (format or number wise).
Does it go back… Continue reading Cuckoo task_ID limitations [on hold]
What is sandboxing? Is it the trapping of OS system calls and then deciding whether to allow it to pass through or not?
How is it implemented to begin with? Would it be by way of hooks in the SSDT (kernel level)?
A traditional malware sandbox running OS-level analysis is prone to missing sophisticated threats and advanced evasion techniques.
The post Just a Passing Fad? Fidget Spinners and the Malware Sandbox appeared first on Security Intelligence.
Continue reading Just a Passing Fad? Fidget Spinners and the Malware Sandbox
A public malware sandbox can be a great substitute for an in-house malware analysis solution — as long as you understand its limitations.
The post Using a Free Online Malware Analysis Sandbox to Dig Into Malicious Code appeared first on Security Intelligence.
Continue reading Using a Free Online Malware Analysis Sandbox to Dig Into Malicious Code
There shouldn’t be a high security risk as long as the email attachments aren’t opened / executed by the user but it could still be a risk and maybe I’m wrong.
So how does Thunderbird quarantine email attachments? (For examp… Continue reading How does Thunderbird quarantine downloaded emails? Is it dangerous to download emails and store them offline?
Is virtualization basically “easier” sandboxing ? Where the system calls are intercepted and rules are set out whether to allow the system call to go through or not. I believe system calls are traced to find out which applica… Continue reading What is the differerence between virtualization and sandboxing
One of Tuesday’s Flash Player patches was a do-over after the researcher who privately reported the problem earlier this year discovered the original patch incompletely resolved the issue. Continue reading Patched Flash Player Sandbox Escape Leaked Windows Credentials
I’m running Debian 9.1 with KDE and for security purposes I’d like to run Firefox ESR in a sandboxed mode.
However I’d still like to use many normal Firefox features for my normal browsing, download files to my computer and s… Continue reading How to sandbox Firefox ESR for normal browsing?
I want to know if there is a way to design a second sandbox inside the original android sandbox, and (re)install the main android apps (like play Store, in the new sandbox, so all new installed app will be in this (second) sa… Continue reading Is it possible to design a sandbox inside the original android sandbox and give it root privileges?