Analysis Environment and SAFETY
- Isolated VM only: never run or even copy a live sample onto your host, phone, or a shared drive.
- Snapshots: take a clean snapshot; revert after every detonation. Assume the VM is disposable.
- Host-only / isolated networking: no path to the real internet or campus network. We simulate services instead.
- No shared folders / clipboard with the host while a sample is live.
- Handle samples as passworded, zipped, clearly-named artifacts — never double-click by reflex.
Key Takeaway
Rule zero: malware runs only inside the sandbox, on the network we control. Break this rule and you can infect yourself, the school, or others.