Cuckoo Sandbox
Any.Run
Sandboxie
VirusTotal
Joe Sandbox
URLscan.io
Shadow Defender
Metadefender
Keycloak
Auth0
Okta
OneLogin
Amazon Cognito
Microsoft Azure Active Directory
Frontegg
FusionAuth
Cuckoo Sandbox KeycloakBased on our record, Cuckoo Sandbox should be more popular than Keycloak. It has been mentiond 18 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
You can detonate it into a VM running an instance of Cuckoo Sandbox. If you want to go the extra mile, you can dump the memory of said VM and analyse it with Volatility Framework. Also, if you want to quickly identify behavioural patterns in executable code, you can use Mandiant's CAPA tool (though idk if it works on .pdfs). Source: about 1 year ago
You should save a copy of the .exe, copy it into a VM running Cuckoo and get a report on exactly what the .exe does. Without this automated dissection, people are making educated guesses. They're probably right, but why not be certain? There is an online version too - https://cuckoosandbox.org. Source: about 1 year ago
You could use a service like cuckoo to check links/files. Source: over 1 year ago
I made my own lab in college using a series of VM's, A windows 10 machine that was packed with analysis tools, a kali listening machine (running inetsim or fakenet, I can't remember.) and I had remnux on another machine (which I ended up not really making use of, but it was there.) I used virtualbox and ran these VM's in an internal network, no internet access. Disabled all clipboard and file sharing after... Source: over 1 year ago
Another option if you want to self-host is https://cuckoosandbox.org/ . Of note, it's currently an unmaintained project so issues may not receive support, but it is free. Source: over 1 year ago
Most of the time nowadays, I prefer offloading this to an identity provider, using OpenID Connect or soon Federated Credential Management (FedCM), even if that means shipping an identity provider as part of the deliverables (I generally go with Keycloak, with keycloak-config-cli to provision its configuration). I'm obviously biased though as I work in IT services, developping software mainly for... - Source: dev.to / 7 months ago
Yet another breach of Okta... Why are companies not running something like keycloak [1] themselves? Are administrative/maintenance costs too high or is it plausible deniability? [1] https://keycloak.org. - Source: Hacker News / 7 months ago
I'd stick with a solution like https://keycloak.org in that instance. Source: about 1 year ago
A few more projects in this space: - Keycloak (you won't get fired for picking this)[0] - CloudFoundry's UAA[1] - Gluu [2] - Keratin [3] - OpenUnison [4] - Dex[5] - Netlify's GoTrue[6] All of these solutions are a bit different but here are some of the axes: - Whether or not they function as an OAuth provider - Whether they're centered around application-user-login (email + password) or application auth (OAuth) or... - Source: Hacker News / over 3 years ago
Any.Run - Interactive malware hunting service. Any environments ready for live testing most type of threats.
Auth0 - Auth0 is a program for people to get authentication and authorization services for their own business use.
Sandboxie - Sandboxie is a program for Windows that is designed to allow the user to isolate individual programs on the hard drive.
Okta - Enterprise-grade identity management for all your apps, users & devices
VirusTotal - VirusTotal is a free service that analyzes suspicious files and URLs and facilitates the quick...
OneLogin - On-demand SSO, directory integration, user provisioning and more
