Visual Learning · 19 · Preview
Malware Analysis
Sandbox timeline: delivery → exec → C2 → detect.
CYNARKS|Cyber Flow Explorer
Teaching simulation · not live capture
Malware Analysis
Detonated only in isolated sandbox — never on prod hosts.
1. Deliver
Phishdelivery
SandboxVM
C2lab sink
DetectEDR
Deliver
Phishing attachment/link delivers a sample into the sandbox.
Lure
- #1 mail → host Deliver Lure
Space · ← → · R restart