| 2022-06-03 | Xavier Mertens | Sandbox Evasion... With Just a Filename! |
| 2021-04-02 | Xavier Mertens | C2 Activity: Sandboxes or Real Victims? |
| 2020-09-03 | Xavier Mertens | Sandbox Evasion Using NTP |
| 2020-02-07 | Xavier Mertens | Sandbox Detection Tricks & Nice Obfuscation in a Single VBScript |
| 2017-01-06 | John Bambenek | Great Misadventures of Security Vendors: Absurd Sandboxing Edition |
| 2017-01-05 | John Bambenek | New Year's Resolution: Build Your Own Malware Lab? |
| 2016-12-10 | Didier Stevens | Sleeping VBS Really Wants To Sleep |
| 2015-12-16 | Xavier Mertens | Playing With Sandboxes Like a Boss |
| 2015-12-05 | Guy Bruneau | Are you looking to setup your own Malware Sandbox? |
| 2013-01-08 | Jim Clausing | Cuckoo 0.5 is out and the world didn't end |
| 2012-03-03 | Jim Clausing | New automated sandbox for Android malware |
| 2011-11-03 | Richard Porter | An Apple, Inc. Sandbox to play in. |
| 2011-11-01 | Russ McRee | Honeynet Project: Android Reverse Engineering (A.R.E.) Virtual Machine released |
| 2010-11-19 | Jason Lam | Adobe Reader X - Sandbox |
| 2010-07-21 | Adrien de Beaupre | Adobe Reader Protected Mode |
https://www.sans.edu
