FCP-FSA-AD-5-0: Fortinet NSE 5 - FortiSandbox 5.0 Administrator

Question

How do attackers commonly conduct anti-virtualization checks while malware is executing to avoid sandbox detection?

Explanation

Anti-virtualization techniques look for virtual-machine or sandbox artifacts in system components, including hardware identifiers, drivers, processes, registry entries, and firmware information. Malware can use those findings to alter or stop execution in an analysis environment.

FCP-FSA-AD-5-0: Fortinet NSE 5 - FortiSandbox 5.0 Administrator

AstroTutor

Notes

Readiness

QuestionQ21

Community Discussion