Cuckoo Sandbox (cuckoo)
Tool and Usage
Cuckoo Sandbox is a malware analysis system. By feeding it suspicious files, Cuckoo can provide detailed findings on what a file did and how it behaved.
In a matter of seconds, Cuckoo Sandbox provides detailed results on what a file does within an isolated environment. This helps with malware analysis and understanding what it exactly tries to achieve. Further analysis can be done, based on the previous actions that were done.
Cuckoo Sandbox was created by Claudio Guarnieri as part of the Google Summer of Code project in 2010.
Usage and audience
Cuckoo Sandbox is commonly used for digital forensics or malware analysis. Target users for this tool are security professionals and system administrators.
Tool review and remarks
The review and analysis of this project resulted in the following remarks for this security tool:
- + More than 2000 GitHub stars
- + The source code of this software is available
- - Many provided pull requests are still open
- - Many reported issues are still open
Supported operating systems
Cuckoo Sandbox is known to work on Android, Linux, and Microsoft Windows.
Cuckoo Sandbox alternatives
|Latest release||2.0.4 [2017-09-09]|
|Last updated||March 8, 2018|
|Cuckoo project website|
|Cuckoo GitHub project|