Implementing Linux support in Drakvuf-Sandbox
- Mentors
- K. Cieśliński (CERT.PL), M. Leszczyński (CERT.PL)
- Organization
- The Honeynet Project
Drakvuf-sandbox is a malware analysis tool that is used to analyze the behavior of the malware in a contained environment. It uses the Drakvuf engine as its backend for interacting with the malware and abstracts a lot of stuff out making analyzing malware easy and user-friendly.
Currently, Drakvuf-Sandbox only supports Windows-based Malware Analysis. The upstream Drakvuf also lacks the proper Linux support. Therefore, this proposal focuses on implementing the support for Linux-based malware analysis.