Reply to thread

Message

<blockquote data-quote="Adrian Ścibor" data-source="post: 977705" data-attributes="member: 71496">As Andy replied to you - it depends on AV. In our tests, Level 3 is the most dangerous, because it is already running malware. That&#039;s why proactive protection and dynamic analysis in the cloud is in the game, e.g. for Avira (by the way, their infrastructure is based on a modified Cuckoo Sandbox, if anyone is interested - I think they have it described deep in the documents somewhere, or they had it in the past). Moreover the Cuckoo Sandbox is used in VoodooShield and in some project by CERT Poland: <a href="https://cert.pl/en/posts/2019/02/strengthening-our-malware-analysis-capabilities/" target="_blank">Strengthening our malware analysis capabilities</a>Eset SS is included in March edition advanced in the wild malware test, therefore please follow me on this brilliant forum <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" /> Results will be available in mid April.</blockquote>

[QUOTE="Adrian Ścibor, post: 977705, member: 71496"] As Andy replied to you - it depends on AV. In our tests, Level 3 is the most dangerous, because it is already running malware. That's why proactive protection and dynamic analysis in the cloud is in the game, e.g. for Avira (by the way, their infrastructure is based on a modified Cuckoo Sandbox, if anyone is interested - I think they have it described deep in the documents somewhere, or they had it in the past). Moreover the Cuckoo Sandbox is used in VoodooShield and in some project by CERT Poland: [URL="https://cert.pl/en/posts/2019/02/strengthening-our-malware-analysis-capabilities/"]Strengthening our malware analysis capabilities[/URL] Eset SS is included in March edition advanced in the wild malware test, therefore please follow me on this brilliant forum :) Results will be available in mid April. [/QUOTE]

Verification