Which analysis technology does Joe Sandbox Cloud use? What report and forensic data does Joe Sandbox Cloud generate?īehavior reports in HTML, PDF, XML and JSON, dropped or downloaded files, memory dumps, strings, PCAP, yara rules, screenshot, unpacked PE files, event and powershell logs, low level function logs, MISP, Stix and MAEC. Joe Sandbox Cloud includes a file type recognition engine which detects over 5000 different files. Joe Sandbox Cloud analyzes all files, including EXE, DLL, PIF, CMD, BAT, COM, SCR, CPL, PDF, DOC(X)(M), XLS(X)(M)(B), PPT(X)(M), HWP (Hangul Korean), JTD (Ichitaro Japan), RFT, XPI, CRX (Chrome Plugin), EML (Email), MSG (Email), CHM, JS, VBS, VBE, LNK, JAR (Java), PS1 (Powershell), ZIP, 7Z, RAR, ZLIB, ASP(X), APK (Android Application Package), MACH-O (Mac), DMG (Mac), APP (Mac), XAR (Safari Plugin), PKG on Windows Desktop, Android and macOS based operating systems. The samples are not uploaded to Virustotal or any third party service! What files does Joe Sandbox Cloud analyze? Your uploaded samples and analysis results are fully private. Use Joe Sandbox DEC (Hybrid Decompilation) for C-code generationĭo you share uploaded samples and analysis results?įor Joe Sandbox Cloud Pro subscriptions we do not share any samples or any analysis results with anyone. Use the Joe Sandbox IDA Bridge Plugin to load and annotate memory dumpsĪccess Joe Sandbox View - threat hunting engine Use Snort rules to detect network patterns
Use Sigma to detected malware based on behaviors Use Yara to detected malware in memory dumps, samples and downloaded files Submit Cookbooks to automate advanced User Behavior URL Analysis & AI based Phishing Detectionĭownload deep Analysis Report in JSON and XMLĭownload low level Function, Event log, AMSI and Powershell Reportsĭownload created / dropped Files, String Files, Screenshots, MISP Report, MAEC Report, unpacked PE files, memory Dumps (and analyze them in IDA with the Joe Sandbox bridge plugin)Īnalysis on Native macOS High Sierra / Mojave / Big Sur / Monterey Live Interaction and Live Results max time Remote Assistance - Live Interaction and Live Results Private Subscriptions, no Sample or Analysis Result Sharing
0 kommentar(er)
