-
-
[转帖]Buster Sandbox Analyzer v1.79
-
发表于: 2012-9-25 01:42 1321
-
Buster Sandbox Analyzer v1.79
2012-09-24
Changelog
Download
2012-09-24
Buster Sandbox Analyzer is a tool that has been designed to analyze the behaviour of processes and the changes made to system and then evaluate if they are malware suspicious.
The changes made to system can be of several types: file system changes, registry changes and port changes.
A file system change happens when a file is created, deleted or modified. Depending of what type of file has been created (executable, library, javascript, batch, etc) and where was created (what folder) we will be able to get valuable information.
Registry changes are those changes made to Windows registry. In this case we will be able to get valuable information from the modified value keys and the new created or deleted registry keys.
Port changes are produced when a connection is done outside, to other computers, or a port is opened locally and this port starts listening for incoming connections.
From all these changes we will obtain the necessary information to evaluate the "risk" of some of the actions taken by sandboxed applications.
Watching all these operations in an easy and safe manner is possible thanks to Sandboxie, an excellent tool created by Ronen Tzur.
Even if Buster Sandbox Analyzer's main goal is to evaluate if sandboxed processes have a malware behaviour, the tool can be used also to simply obtain a list of changes made to system, so if you install a software you will know exactly what installs and where.
Additionally apart of system changes we can consider other actions as malware suspicious: keyboard logging, end the Windows session, load a driver, start a service, connect to Internet, etc.
All the above operations can be considered as not malicious but if they are performed when it's not expected, that's something we must take in consideration. Therefore it's not only important to consider what actions are performed. It's also important to consider if it's reasonable certain actions are performed.
Buster Sandbox Analyzer is freeware. If you like this software, please, buy a license of Sandboxie.
Limitations
Buster Sandbox Analyzer's limitations are imposed by Sandboxie's limitations, and of course, by my own limitations as malware analyzer and programming coder.
Sandboxie has next limitations:
- For security reasons Sandboxie does not allow driver installation and system hooks.
- Sandboxie fails to sandbox certain executable files, usually compressed files.
134K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3u0K6j5g2)9J5k6h3W2K6L8$3k6@1N6$3q4J5k6g2)9J5k6h3&6D9
Changelog
- Added “Edit BSA_USER.DAT” feature
- Improved typical error problem checkings
- Updated BSA.DAT
- Updated LOG_API
- Updated malware behaviors
- Fixed several bugs
Download
Portable: 2f1K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3u0K6j5g2)9J5k6h3W2K6L8$3k6@1N6$3q4J5k6g2)9J5k6h3&6D9i4K6u0r3j5Y4y4S2i4K6u0W2M7X3q4J5
Welcome forum.forum is a home.
Please respect the copyright from the Internet.
Пожалуйста, уважайте авторское право в Интернете.
來源于互聯網, 請尊重版權.
所發資源全部來自對互聯網公共資源的收集和整理,僅供學習之用,請于下載后24小時自行刪除!
Issued by all the resources of public resources from the Internet to collect and collate,
study purposes only,
please delete themselves 24 hours after downloading!
Выпущено всеми ресурсами государственных ресурсо
в из Интернет
а на сбор и обобщение, изучение целей, пожалуйста,
удалите себя
24 часов после скачивания!
You can Google.
Программное обеспечение выпуска и Windows Crack
Обучение Нам-Dabei Guanyin Бодхисаттва Нам без митабха
Compassion are compulsory for any Buddhist, Jew money for the people of the world will a
break this oath can be satisfactorily beings all desire and governance 84 000 kinds of
diseases. Bodhisattva white Buddha: "If living beings recite the Great Compassion Mantra,
Health Buddhas States, not the immeasurable Samadhi eloquence, if not then by all seek in
the now Health rest into Zhengjue, provided that in addition to the poor and not sincere .
No merciful Avalokitesvara Bodhisattva, would like to sincerely recite this mantra, who obtain Nirvana.
Нет милосердный Бодхисаттвы Авалокитешвары, хоте
л бы искренне повторять эту мантру,
которые получают нирваны.
南无大慈大悲圣观世音菩萨
Нет милосердный Бодхисаттвы Авалокитешвары, хотел бы и
скренне повторять эту мантру, которые получают нирваны.
Сострадание является обязательным для любого буддиста, деньги
еврей для людей всего мира будут нарушать эту клятву может быть
удовлетворительно существа все желания и управления 84 000 видов
заболеваний. Бодхисаттва белого Будды: "Если живые существа чит
ать мантру Великого Сострадания, здоровье Будды государств, а н
е неизмеримый красноречие самадхи, если нет, то все стремятся в
настоящее время здоровье отдых в Zhengjue, при условии, что в дополн
ение к бедным, а не искренняя .
Бодхисаттва нарушить эту клятву была земля шесть переменной ви
брации, дождь Baohua, весело и дальше, Shifangzhufo Xijie радость, демоны ер
етиков, террористические валовой вертикальные, все общество, в
се сертификаты на фрукты, или слишком Сюй Tuohuan фруктов , или имет
ь Situo Хан фруктов или есть фрукты Nahan, Get Arahantship, или один за два to
триста сорок пять, даже десять которая неизмерима бодхичитты с
уществ.
Blessing forum!
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课
赞赏
他的文章
赞赏
雪币:
留言: