Contributor
Manorit Chawdhry

Implementing Linux support in Drakvuf-Sandbox


Mentors
K. Cieśliński (CERT.PL), M. Leszczyński (CERT.PL)
Organization
The Honeynet Project

Drakvuf-sandbox is a malware analysis tool that is used to analyze the behavior of the malware in a contained environment. It uses the Drakvuf engine as its backend for interacting with the malware and abstracts a lot of stuff out making analyzing malware easy and user-friendly.

Currently, Drakvuf-Sandbox only supports Windows-based Malware Analysis. The upstream Drakvuf also lacks the proper Linux support. Therefore, this proposal focuses on implementing the support for Linux-based malware analysis.