Jump to content
Nytro

Drakvuf

Recommended Posts

Drakvuf

DRAKVUF Dynamic Malware Analysis

Download as .tar.gz View on GitHub Introduction

DRAKVUF is an agentless dynamic malware analysis system built on Xen, LibVMI, Volatility and Rekall. It allows for in-depth execution tracing of malware samples, extracting deleted files from memory and more.

Hardware requirements

For DRAKVUF to work you will need an Intel CPU with virtualization support and with Extended Page Tables (EPT). DRAKVUF is not going to work on any other CPUs or without EPT. It is recommended to have at least 8GB RAM but you may be able get by with less.

Supported guests

DRAKVUF currently supports Windows 7 VMs, both 32 and 64-bit versions.

Demos

Sursa: DRAKVUF Dynamic Malware Analysis

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...