Using Hyper-V Sockets for Real-time Data Extraction from a Malware Analysis Sandbox

István-Attila Császár, Radu-Marian Portase, Adrian Coleşa +1

We present how Hyper-V sockets can be used as a real-time communication channel for a malware analysis sandbox. We show that, compared to WinSock TCP sockets, Hyper-V sockets are n…