Sandbox Observer

[Guest321]

Thanks for great utility ..anyway using version 1.8.0.256 and when i click Show log from tray icon message popup Log file not found : C.\user\name\appdata\roaming\SBOserver\SBOserver.log

why im getting this message ? any help please..........

[Me]

Logging is disabled by default. Right click on the SO tray icon -> Edit settings and check that "Logging" is set to "y".
There is no application restart necessary if the settings were changed via the tray icon.

[Me]

v1.9

- Changed default and minimal value for "ScanInterval" to "3"
- Enabling/Disabling "Show log" in tray menu dependent on "Logging" setting
- History.txt distributed with main application
- Warning if hash database has been deleted by an external application or action
- Warning if hash database has been modified by an external application or action

[Ruhe]

v1.10

- Auto-shutdown if Sandboxie setup found
- More logging output

[Ruhe]

v1.11

- Added option to show additional splash text

v1.12

- Install %APPDATA%\SBObserver\SBObserver.ini.default as template with all default settings
- Added options to check system settings (UAC, DEP, AppLocker) during application start

[Ruhe]

v1.13

- DEP checking introduced in v1.12 (temporary) removed

[Ruhe]

v1.14

- Re-enabled DEP checking. Follow the steps in the installed CheckDEP.pdf

[Ruhe]

v1.15

- Added option and exclusions to check sandboxes for missing 'DropAdminRights' setting
- Logging enabled by default

[Ruhe]

Users that run SBO via the task scheduler (see CheckDEP.pdf) should change the existing task scheduler job:

3rd screenshot, "Edit Action" -> Enter the path to SBObserver.exe into the field "Start in", C:\Apps in my example.

[Ruhe]

v1.16

- Updated sigcheck.exe to v1.70
- Removed options to check system settings (UAC, DEP, AppLocker)
- Changed distribution format from stand-alone executable to ZIP

[Ruhe]

v1.17

- Fixed an issue after system startup if StartWithWindows=y

[Ruhe]

v1.18 - BETA

- Scan sandboxed files with Emsisoft Commandline Scanner 5.0

See %APPDATA%\SBObserver\SBObserver.ini.default for details and needed settings:

Code: Select all

[A2Cmd]
;--- Scan sandboxed files with Emsisoft Commandline Scanner 5.0
;--- www.emsisoft.com/en/software/cmd/
;--- Example
;---   A2CmdFolder=c:\Portable\a2cmd
;---   A2CmdParams=/service
;--- Empty 'A2CmdParams' uses default scanner settings. Define exclusions
;--- in section [Exclusions] -> key 'A2Cmd'. It is highly recommended to
;--- install a2cmd with /service once.
A2CmdEnabled=n
A2CmdFolder=
A2CmdParams=/service

[Ruhe]

Just uploaded a new beta build but also decided to remove different settings and features (see SBObserver.ini.default).

[Ruhe]

The board member wolfmann published an article Programs analysis tools — Sandboxie “add-ons” on his security site.
Beside talking about SandboxDiff, Buster Sandbox Analyzer he also mentioned my Sandbox Observer.

Thanks!

[Ruhe]

v1.18

- Scan sandboxed files with Emsisoft Commandline Scanner 5.0, www.emsisoft.com/en/software/cmd/
- Removed different settings and features