Cuckoo Sandbox is an open-source automated malware analysis platform that runs suspicious files and URLs in isolated virtual machines. It is intended...
Pros
- Self-hosted and highly customizable for research and SOC workflows
- Produces behavioral, process, filesystem, registry, and network analysis
- Supports automated analysis at scale with virtual-machine isolation
Cons
- Requires substantially more infrastructure and maintenance than cloud sandboxes
- Setup and tuning are more difficult than commercial alternatives
- Evasion-resistant analysis is weaker than newer specialized platforms
Free, open source
