DRAKVUF
A virtualization-based agentless black-box binary analysis system for stealthy execution tracing.
What is DRAKVUF?
DRAKVUF is a virtualization-based agentless black-box binary analysis system that allows for in-depth execution tracing of arbitrary binaries, including operating systems, without installing any software within the virtual machine used for analysis. It leverages Intel hardware virtualization extensions to monitor system execution from outside the VM, providing a stealthy platform for security research and malware investigation.
Security researchers, malware analysts, and forensic investigators who need to perform stealthy, in-depth binary analysis of Windows and Linux systems in virtualized environments.
DRAKVUF offers a unique agentless approach to binary analysis that minimizes detection risk by operating entirely outside the target VM, using hardware virtualization for deep system introspection without the need for in-guest instrumentation.
Overview
DRAKVUF Black-box Binary Analysis
Use Cases
Best For
- Stealthy malware analysis in virtualized sandboxes
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
