Cuckoo Sandbox VS Status.io

Cuckoo Sandbox Reviews

Status.io Reviews

Cuckoo Sandbox mentions (18)

• How to analyze malicious PDF?

  You can detonate it into a VM running an instance of Cuckoo Sandbox. If you want to go the extra mile, you can dump the memory of said VM and analyse it with Volatility Framework. Also, if you want to quickly identify behavioural patterns in executable code, you can use Mandiant's CAPA tool (though idk if it works on .pdfs). Source: 12 months ago

• "PDF".exe pwns my user, but how exactly?

  You should save a copy of the .exe, copy it into a VM running Cuckoo and get a report on exactly what the .exe does. Without this automated dissection, people are making educated guesses. They're probably right, but why not be certain? There is an online version too - https://cuckoosandbox.org. Source: about 1 year ago

• Exist a way, that can tell X file that I want to download not contain any malicious file?

  You could use a service like cuckoo to check links/files. Source: over 1 year ago

• Best practices for malware analysis and securing the environment you're testing in.

  I made my own lab in college using a series of VM's, A windows 10 machine that was packed with analysis tools, a kali listening machine (running inetsim or fakenet, I can't remember.) and I had remnux on another machine (which I ended up not really making use of, but it was there.) I used virtualbox and ran these VM's in an internal network, no internet access. Disabled all clipboard and file sharing after... Source: over 1 year ago

• Sandbox?

  Another option if you want to self-host is https://cuckoosandbox.org/ . Of note, it's currently an unmaintained project so issues may not receive support, but it is free. Source: over 1 year ago

Status.io mentions (18)

• Mass Notify Clients of possible/on going outages that may or may not affect them?

  I strongly recommend a status page for your msp … there are many to choose from … we use https://status.io. Source: 11 months ago

• ConnectWise SSO down?

  Yup and the things they don't "invent", like the status page from status.io, it's poorly implemented. It took so long to get this basic page up with a complete garbage process. Source: about 1 year ago

• Current API plan does not include access to this endpoint

  Also weird given that Twitter is using 3rd-party service which apparently doesn’t even automatically log and post know downtime issues; service being: https://status.io/ (Assuming this is more of a the site’s not down unless the CTO says it is services.). - Source: Hacker News / about 1 year ago

• Connectwise 404 errors

  Only if status.io had some type of automation that could tie into another product like ConnectWise Automate.... Source: about 1 year ago

• Alternative communications channel

  Put it on our private https://status.io/ page. Source: over 1 year ago