DRAKVUF Sandbox vs Symantec IT Management Suite
DRAKVUF Sandbox
github.com
Symantec IT Management Suite
broadcom.comSide by side
| Figure | DRAKVUF Sandbox | Symantec IT Management Suite |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 0 | 2 |
| Spec score · Malware Analysis Sandboxes | 7.7 (#9) | 7.9 (#7) |
| Integrations | Optional integrations include S3 for analysis storage and an experimental Karton integration plugin in release v0.21.0. | In ITMS 8.8.1 and later, Data Connector supports direct REST API communication for exchanging data with external platforms. |
| Purpose | DRAKVUF Sandbox is an automated black-box malware analysis system powered by the DRAKVUF engine. | IT Management Suite manages, patches, and remediates application and operating system configurations on desktops, laptops, and servers. |
| Support | The maintainers list [email protected] as the fastest general contact and provide a Discord community link. | Broadcom provides technical support, product documentation, community forums, training, and partner services for the suite. |
Plans
Symantec IT Management Suite
- Symantec IT Management SuitePriced on request
- Symantec IT Management SuitePriced on request
In their own words
DRAKVUF Sandbox
DRAKVUF Sandbox is a free, GPL version 2 software project from CERT Polska for automated, black-box malware analysis. It uses the DRAKVUF engine and examines suspicious files without installing an agent inside the guest operating system. Files can be uploaded through a web interface, while an API, analysis queue, dashboard, Flask web application, rq worker and Redis support the workflow. Default plugins monitor WinAPI calls, file activity, memory regions, processes, network connections, DNS queries and TLS master keys. Reports show process trees, network and domain activity, modified or deleted files and high-level TTP indicators. Available downloads can include PCAP traffic, intercepted TLS keys and memory dumps. Uploads can disable guest internet access. On-premises deployment uses Xen 4.17 or later, with 4.19 recommended, on Debian 12 or Ubuntu 22.04 Intel hosts. Supported guests are Windows 10 x64 and Windows 7 x64.
Symantec IT Management Suite
Symantec IT Management Suite manages application and operating-system configurations across desktops, laptops, and servers. It combines Asset Management Suite, Client Management Suite, and Server Management Suite, which can be licensed together or separately. Management features include automated patching, on-demand assessments, Patch Now actions, and CVE-based reporting. Deployment supports operating-system rollout, bare-metal provisioning, hardware-independent imaging, and software distribution. CMDB-backed discovery tracks hardware, software, virtual assets, contracts, warranties, and license usage. Cloud-Enabled Management collects inventory and delivers patches or software updates to Windows and Mac devices outside the corporate network without VPN. Users can request approved software through a self-service portal. The suite supports Microsoft, Red Hat, CentOS, and SUSE updates, plus Windows and Mac workstations. ITMS 8.8.1 and later provide REST API data exchange. Microsoft SQL Server is required for ITMS 8.7.x and 8.8.x; other listed database platforms are unsupported. Pricing is on request.