From the course: CompTIA Security+ (SY0-601) Cert Prep: 8 Network Security Design and Implementation

Unlock the full course today

Join today to access over 22,500 courses taught by industry experts or purchase this course individually.

Cuckoo

Cuckoo

From the course: CompTIA Security+ (SY0-601) Cert Prep: 8 Network Security Design and Implementation

Start my 1-month free trial

Cuckoo

“

- [Narrator] Cuckoo is a malware analysis tool. More specifically Cuckoo is a sandbox environment that allows you to test suspicious files to determine whether they might display malicious activity. It's very powerful and has some quite advanced features. And best of all Cuckoo is an open source tool that you can use for free. Cuckoo is able to analyze malicious executable files. That's the core functionality of any malware analysis tool. But it can also look at office productivity documents, PDFs and other file types, email messages and even website URLs. Cuckoo traces the API calls made by suspicious files as well as their other system behavior and it also uses Tcpdump to capture any network traffic generated by the file. Cuckoo can perform deep memory analysis and it does all this with a variety of virtualized platforms including Windows, Mac OS, Linux and Android environments. If you find yourself working in a role where…

Contents