Automated Sandboxes

• Detonate a sample automatically and produce a behavior report: API calls, dropped files, network, screenshots, ATT&CK mapping.
• Cuckoo / CAPE: open-source, self-hosted; CAPE adds config and payload extraction.
• any.run: interactive, browser-based, real-time.
• Hybrid Analysis: free web submission with rich reports.