Skip to content
This repository has been archived by the owner on Jul 23, 2020. It is now read-only.

Latest commit

 

History

History

old

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
bson
bson
 
 
distorm3.2-package
distorm3.2-package
 
 
tests
tests
 
 
LICENSE.txt
LICENSE.txt
 
 
Makefile
Makefile
 
 
README.md
README.md
 
 
config.c
config.c
 
 
config.h
config.h
 
 
cuckoomon.c
cuckoomon.c
 
 
hook_file.c
hook_file.c
 
 
hook_file.h
hook_file.h
 
 
hook_misc.c
hook_misc.c
 
 
hook_network.c
hook_network.c
 
 
hook_process.c
hook_process.c
 
 
hook_reg.c
hook_reg.c
 
 
hook_reg_native.c
hook_reg_native.c
 
 
hook_services.c
hook_services.c
 
 
hook_sleep.c
hook_sleep.c
 
 
hook_sleep.h
hook_sleep.h
 
 
hook_socket.c
hook_socket.c
 
 
hook_special.c
hook_special.c
 
 
hook_sync.c
hook_sync.c
 
 
hook_thread.c
hook_thread.c
 
 
hook_window.c
hook_window.c
 
 
hooking.c
hooking.c
 
 
hooking.h
hooking.h
 
 
hooks.h
hooks.h
 
 
ignore.c
ignore.c
 
 
ignore.h
ignore.h
 
 
log.c
log.c
 
 
log.h
log.h
 
 
logtbl.py
logtbl.py
 
 
lookup.c
lookup.c
 
 
lookup.h
lookup.h
 
 
misc.c
misc.c
 
 
misc.h
misc.h
 
 
netlog.py
netlog.py
 
 
ntapi.h
ntapi.h
 
 
pipe.c
pipe.c
 
 
pipe.h
pipe.h
 
 
utf8.c
utf8.c
 
 
utf8.h
utf8.h
 
 

README.md

CuckooMon

This is the Cuckoo Sandbox Monitor, one of the core elements of Cuckoo Sandbox. CuckooMon provides Cuckoo Sandbox the ability to intercept the execution flow of a potential malicious sample.

Through Cuckoo Sandbox it is able to monitor all kinds of samples, such as executables, office files (Microsoft Word, Microsoft Excel), PDF files, and much more; virtually anything that can be ran on windows (in usermode.)

Authors

  • Jurriaan Bremer
  • Mark Schloesser
  • Claudio Guarnieri