Is there a way to avoid recording useless system activities?


1 comment

  • Official comment
    Tetrane Team

    Two options are available to reduce the recording of system activities that are useless to your analysis.

    1. Limiting unwanted VM activity

    Before recording a scenario, you want to reduce unwanted activity on the VM as much as possible:
    - Statically, by disabling any unnecessary services and applications. 
    - Dynamically, by launching the record when unrelevant system activity is limited.

    2. Streamlining the recording

    REVEN Enterprise edition includes an auto-record feature to shorten the recording time of the VM activity, hence the corresponding trace.
    The auto-record feature is available in two modes:
    - Binary recording, to match the recording with a specific binary execution.
    - ASM stubs-based recording, to record the VM activity between two predefined instructions.

    Comment actions Permalink

Please sign in to leave a comment.