{"id":14912,"date":"2025-04-15T04:00:59","date_gmt":"2025-04-15T04:00:59","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/more-power-less-hardware\/"},"modified":"2025-04-15T04:00:59","modified_gmt":"2025-04-15T04:00:59","slug":"more-power-less-hardware","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/more-power-less-hardware\/","title":{"rendered":"More Power, Less Hardware"},"content":{"rendered":"\n
Here is the rewritten content without changing its meaning, retaining the original length, and keeping proper headings and titles:<\/p>\n
\n

<\/p>\n

<\/p>\n

Kaspersky has introduced a significant update to its Kaspersky Research Sandbox, launching version 3.0 with enhanced capabilities for more in-depth file analysis, interactive threat investigation<\/a>, and substantially reduced hardware requirements<\/a>. Designed for security teams and threat researchers, the enhanced solution offers greater flexibility, efficiency, and cost-effectiveness in detecting and analyzing modern cyber threats.<\/p>\n

Kaspersky Research Sandbox has been developed directly from the company’s in-lab sandboxing complex, a technology that has been evolving for over two decades. It incorporates all the knowledge about malware behaviors acquired through continuous threat research, enabling Kaspersky to detect over 400,000 new malicious objects every day.<\/p>\n

One of the key advancements in Kaspersky Research Sandbox 3.0<\/a> is the introduction of visual interaction during sample detonation (VNC). This feature allows security analysts to interact with the execution environment in real-time, monitor malware behavior as it unfolds, and run investigation tools to uncover additional threat details. This deeper level of analysis enhances the ability to detect sophisticated threats that adapt to traditional sandboxing methods.<\/p>\n

The updated sandbox now also offers the option to work with Kaspersky Security Network<\/a> (KSN) as an alternative to Kaspersky Private Security Network (KPSN). This flexibility provides a more cost-effective and faster deployment option, particularly useful for pilot projects. Additionally, this change reduces hardware requirements by half, making the solution more accessible for organizations with limited resources.<\/p>\n

To address the growing use of obfuscation techniques in modern attacks, Kaspersky Research Sandbox 3.0 now incorporates Microsoft AMSI (Antimalware Scan Interface) output. This integration significantly improves detection of packed and obfuscated scripts, including malicious PowerShell activity, a tactic increasingly exploited by threat actors.<\/p>\n

Further improving threat intelligence capabilities<\/a>, the update introduces extended static analysis. By examining key file attributes such as strings, headers, sections, import and export tables, and entropy graphs for executable files, analysts gain critical insights into malware characteristics, even for operating systems not yet supported for dynamic analysis, such as macOS.<\/p>\n

Alongside these technological enhancements, the user interface has been completely redesigned to improve usability and streamline the research process. The enhanced System Activities page now offers improved visualization, allowing analysts to filter reports and focus only on relevant malicious processes. The History table search function makes it easier to retrieve previous analysis results, helping security teams quickly resume investigations.<\/p>\n

\u201cWith Kaspersky Research Sandbox 3.0, we\u2019re providing security teams with even more extensive analysis capabilities, greater visibility and control over malware behavior, and a significantly decreased entry threshold for organizations with limited hardware resources. Built on over two decades of malware research, Kaspersky Research Sandbox combines our deep threat analysis expertise with cutting-edge technology. It empowers security teams with a professional interactive malware investigation tool with even deeper analysis and optimized performance – now with twice-lowered hardware requirements,\u201d<\/em> comments Boris Storonkin, Threat Intelligence Product Manager at Kaspersky.<\/p>\n

\n