Summary
Learn how to confirm if the internal Virtual Analyzer is functioning. This is useful when you are suspecting that it is overloaded or has crashed.
The Virtual Analyzer is a virtualized environment designed to allow simulation of malware behavior and inspection of untrusted programs.
Details
To verify if virtual analyzer is working, select the version and follow the procedure.
- Log in to the DDI web console.
- Modify the browser URL to “https://<DDI-IP>/html/troubleshooting.htm”.
You will be redirected to the DDI debug/troubleshooting page. -
Go to Internal Virtual Analyzer.
For versions 3.5 to 3.8
- Log in to the DDI web console.
- Modify the browser URL to “https://<DDI-IP>/html/troubleshooting.htm”.
You will be redirected to the DDI debug/troubleshooting page. -
Go to Internal Virtual Analyzer.
For version 3.2
- Log in to the DDI web console.
- Modify the browser URL to "https://<DDI-IP>/html/rdqa.htm".
You will be redirected to the DDI debug page. - Go to Real-time Status > DTAS Sandbox Console.
If you can see the Sandbox console without an error message, this means the Virtual Analyzer is working.
The sample screen below provides a real-time view of a working Virtual Analyzer environment.
The Virtual Analyzer will not be overloaded by too many samples because the DTAS Sync module and Sandbox File Submitter will control the sample number in the queue.
