CPSC 458 - Windows Sandbox configuration for Malware Analysis

malware-analysis.wsb

<!-- Edit to taste, e.g. <HostFolder>s and <MemoryInMB> -->
<Configuration>
  <vGpu>Disable</vGpu>
  <Networking>Disable</Networking>
  <MappedFolders>
    <MappedFolder>
      <HostFolder>C:\Development\cpsc458\tools</HostFolder>
      <SandboxFolder>C:\Users\WDAGUtilityAccount\Desktop\tools</SandboxFolder>
      <ReadOnly>true</ReadOnly>
    </MappedFolder>
    <MappedFolder>
      <HostFolder>C:\Development\cpsc458\airlock</HostFolder>
      <SandboxFolder>C:\Users\WDAGUtilityAccount\Desktop\airlock</SandboxFolder>
      <ReadOnly>false</ReadOnly>
    </MappedFolder>
  </MappedFolders>
  <LogonCommand>
    <Command>explorer.exe C:\Users\WDAGUtilityAccount\Desktop\tools</Command>
  </LogonCommand>
  <AudioInput>Disable</AudioInput>
  <VideoInput>Disable</VideoInput>
  <ProtectedClient>Enable</ProtectedClient>
  <PrinterRedirection>Disable</PrinterRedirection>
  <ClipboardRedirection>Disable</ClipboardRedirection>
  <MemoryInMB>2048</MemoryInMB>
</Configuration>