Pt Sandbox Update: More VMs, Lower Expectations

Positive Technologies has recently announced the release of Pt Sandbox version 5.17, a crucial update aimed at combating sophisticated malicious software. This new version boasts significantly improved productivity compared to version 5.7, thanks to the introduction of new features without compromising threat detection accuracy.

One of the key enhancements in this latest release is the ability to increase the number of virtual machines operating simultaneously on one behavior analysis node. By optimizing hardware emulation processes and incorporating system call modules, the analysis of files has been expedited and the scope of information security event logging has been expanded, leading to more effective threat identification.

Another notable improvement is the introduction of preliminary file filtration, whereby the system categorizes incoming files and only submits those that meet predefined security criteria for analysis. This new functionality enables users to customize filtering for specific tasks, such as seasonal projects or important events, ultimately reducing data processing time or allowing for more thorough inspections.

Furthermore, changes have been made to the sequence of file checking, providing users with the flexibility to modify task priorities, cancel tasks, or access detailed information. The incorporation of previous check results into the analysis process facilitates faster processing of large data volumes, which is particularly advantageous for handling extensive information flows. Overall, these updates aim to enhance the effectiveness and efficiency of Pt Sandbox in safeguarding against complex cyber threats.

/Reports, release notes, official announcements.