A sandbox is a security mechanism designed to isolate running processes with the same permissions.
It is often used to run untested code or untrusted third-party programs.
Unlike traditional antivirus solutions, which are designed to detect known malware, a sandbox captures unknown files entering the network and actively executes and analyzes them in a secure virtual environment. This is where all malicious actions are observed and recorded. Through active analysis, it subsequently identifies malicious files and can accurately detect new or modified malware within minutes. This malware might have previously been unknown.
