So what kind of people are really doing this malware analysis?
Generally, you think of like reverse engineers and kind of a small
subset of like a security operations team,
and not every organization has those.
But there're other use cases for this, correct? Oh, absolutely.
I mean,
anybody who's in IT or Security at some point will
have the need to analyze malware.
You have to understand, it may not necessarily be you
receive a piece of malware, you get an executable or
something that you want to analyze.
If you're like me, I always get emails from clients or people I work with saying,
Hey, I got this file in an email.
Can you check it out to see if it's malicious?
You need something in order to analyze that,
to even determine if something is malicious, and
that's what the sandbox is used for.
We can throw our malware into it into a safe environment where
we're not worried about infecting all these other systems on
our network or across the internet and analyze it using the
conditions that we control.
Yeah, absolutely.
And that's going to go beyond where we have things like VirusTotal you can go
and check and see if anyone else has seen this malware before,
right?
But if we're looking at new things, nothing is going to show up. Exactly.
So just because it doesn't pop on VirusTotal doesn't mean it's not something
that's going to be malicious on your network. Right, exactly.