Of course, gathering all of that information and performing those tests can prove to be quite valuable to a security VAR, but the real power of the product comes from the reporting capabilities. Here, CWSandbox performs a granular analysis to provide better readability of the data collected. The analysis captures resource events which include API calls, WinSock, packets and more.

That analysis drives the product’s report capabilities. Those reports start out as  XML files and can be automatically parsed with XSL templates to generate HTML or text reports. Reports show information on the list of newly created files and registry entries, as well as any processes that were launched by the malware application. The reports can be e-mailed automatically to the submitter or administrator, stored in the database or presented in the Web interface.

For solution providers, the reports become the deliverables to the customer. Not only can the solution provider (or service provider) charge for the reports, those same reports can be used to sell remediation services if needed. For managed security providers, the functions of CWSandbox can be used to deliver peace of mind and prove to customers that they are protected. What’s more, as new malware threats arrive, the testing process can be done again to make sure that security application updates are offering protection from the latest threats.

CWSandbox has been tested on Windows 2000, XP and Vista. Running it on other operating systems will require modifications. MySQL and MS SQL databases are supported. CWSandbox can run in VMware environments on a single machine or cluster. The recommended minimum hardware configuration consists of a Xeon 3+Ghz CPU, 2+Gig RAM and appropriate storage. The company also recommends using the Sunbelt Personal Firewall for terminating potential outbound malware traffic and Faronics Deep Freeze Enterprise for restoring "clean" images after testing. Product pricing is available upon request directly from Sunbelt Software or one of the company’s authorized partners.