Hi! I am studying capture-hpc recently. I have some questions which I hope someone can help
a. If the input URL like this http://aaa.bbb.com/ccc.exe It will show the download run dialog box in vmware console. What's the exactly action happen in capture client? Will capture client run the program or just download it without further action. Or capture client just do nothing with the dialog box? b. The second question is could we set longer time to revert a vm machine? Because I want to monitor the following behavior while the client infect by a malicious URL. It may bring more malware or try to spread itself. Therefore I want to know do we have a option to postpone the revert time? c. Could the URL accept this kind of format file:\\abc\xxx.exe I can use iexplore file:\\abc\xxx.exe to execute a remote file on cmd console. But when I put this URI into URL list. It seems the result are always error. Thanks a lot. Sincerely Keith Lin
_______________________________________________ Capture-HPC mailing list Capture-HPC@public.honeynet.org https://public.honeynet.org/mailman/listinfo/capture-hpc
