What is Cuckoo Sandbox?

• A. A cloud-based service for email scanning
• B. Cuckoo Sandbox is a popular free malware analysis system sandbox that can be run locally
• C. A firewall appliance
• D. An online threat intelligence service

Answer: (B)

Cuckoo Sandbox is an open‑source malware analysis framework that provides a sandbox to safely run suspicious files in isolated environments and observe their behavior. Analysts install it locally in a lab or on a dedicated machine, and it automatically executes samples inside virtual machines or containers, collecting evidence such as system calls, file and registry changes, network activity, screenshots, and more. It then generates reports that help determine what the malware does and how it behaves. This makes it a practical tool for dynamic malware analysis in a controlled, local setup. It isn’t a cloud-based email scanning service, a firewall appliance, or an online threat intelligence service.