Agreed, though I combine using Little Snitch with Radio Silence: https://radiosilenceapp.com Little Snitch is great for when I want hyper granular control of a specific app's network permissions while Radio Silence gives me a super quick way to just block EVERYTHING for a particular app right away without even opening it the first time. - Source: Hacker News / almost 1 year ago

I'm using radio silence for years and it is awesome :) https://radiosilenceapp.com. - Source: Hacker News / about 1 year ago

Forgot to mention Radio Silence (commercial), seen by many as an easier introduction vs Little Snitch. Source: over 1 year ago

Sorry for the late reply. I use Lulu which should be enough, but I also simultaneously use Radio Silence to be safe. Source: almost 2 years ago

Little Snitch (LS) is considered by many to be the gold standard. The aforementioned Lulu has a good reputation. The app Hands Off! Appears to be no longer developed (site offline). Then there's Radio Silence that may well fit your needs. Finally, one or more apps by Murus may be of interest but AFAIK these are not easy to configure and may be overkill for the average Mac user. I'm not familiar with TripMode. Source: over 2 years ago

You can detonate it into a VM running an instance of Cuckoo Sandbox. If you want to go the extra mile, you can dump the memory of said VM and analyse it with Volatility Framework. Also, if you want to quickly identify behavioural patterns in executable code, you can use Mandiant's CAPA tool (though idk if it works on .pdfs). Source: about 1 year ago

You should save a copy of the .exe, copy it into a VM running Cuckoo and get a report on exactly what the .exe does. Without this automated dissection, people are making educated guesses. They're probably right, but why not be certain? There is an online version too - https://cuckoosandbox.org. Source: about 1 year ago

You could use a service like cuckoo to check links/files. Source: over 1 year ago

I made my own lab in college using a series of VM's, A windows 10 machine that was packed with analysis tools, a kali listening machine (running inetsim or fakenet, I can't remember.) and I had remnux on another machine (which I ended up not really making use of, but it was there.) I used virtualbox and ran these VM's in an internal network, no internet access. Disabled all clipboard and file sharing after... Source: over 1 year ago

Another option if you want to self-host is https://cuckoosandbox.org/ . Of note, it's currently an unmaintained project so issues may not receive support, but it is free. Source: over 1 year ago