Introducing the sandbox technology

In cybersecurity, sandbox technology is an isolated test environment that looks like end user operating systems to safely execute and analyze suspicious files and investigate their behavior. A sandbox is also useful if you are dealing with zero-day malware.

Sandbox types

There are two types of sandboxes that are usually used in malware analysis by SOC analysts:

• Cloud sandboxes: These are virtual environments that are hosted in the cloud and allow analysts to test and analyze malware and suspicious file behavior. Cloud sandbox examples are ANY.RUN Sandbox (https://app.any.run/), and the Hybrid Analysis sandbox (https://www.hybrid-analysis.com/).
• On-premises sandboxes: Also known as in-house sandboxes, these are a type of sandbox that is installed and run locally within an organization’s own infrastructure. This sandbox is not accessible from outside the organization’s network, providing an additional layer of security...