One of the main features of Deep Discovery products is the Virtual Analyzer which enables the execution and testing of suspicious files that it encounters.
Virtual Analyzer uses system images to observe sample behavior and characteristics within an isolated and controllable virtual environment, and then assigns a risk level to the sample.
To integrate Virtual Analyzer with Deep Discovery products, preparing Open Virtualization Appliance (OVA) files for Virtual Analyzer images is needed.
Currently, different Deep Discovery products and versions support different Microsoft Office versions installed inside the OVA files.
Refer to the following for more detailed information:
- DDI - Supported Microsoft Office versions for Virtual Analyzer in Deep Discovery Inspector (DDI)
- DDEI - Supported Microsoft Office versions for Virtual Analyzer in Deep Discovery Email Inspector (DDEI)
- DDAN - Supported Microsoft Office versions for Virtual Analyzer in Deep Discovery Analyzer (DDAN)
To prepare the Virtual Analyzer images, refer to the up-to-date user guide: Virtual Analyzer Image Preparation Tool.
