This software contains tools for automatically analyzing suspicious files. There are custom security components for monitoring of all active processes.
Cuckoo
Cuckoo is a Windows utility that allows users to prevent external network attacks by blocking infected files in real time. It is important to mention that the program is oriented toward professional IT technicians. All interactions are performed through the command line or web interface.
Setup
You are instructed to visit the official website for viewing detailed installation instructions. It is necessary to prepare the host and guest servers before setting up the main application.
File scan
There is an option to submit a suspicious item for detailed analysis. Additional command parameters for specifying a custom timeout period, setting a high task priority and changing the default route are provided.
Users can run the infected file on a virtual machine to analyze its attack capabilities. This functionality is helpful for developing security applications.
Database integration
Cuckoo utilizes the SQLAlchemy object-relational mapping module for creating sandboxes based on MySQL, MariaDB and other types of database systems. It is possible to track new submissions, samples and overall data integrity.
Features
- free to download and use;
- provides security instruments for preventing external virus attacks;
- oriented toward IT professionals;
- allows you to use the SQLAlchemy ORM module for generating database sandboxes;
- it is possible to analyze infected files on a secure virtual machine;
- compatible with modern versions of Windows.