Running malware within Sandboxie

[Audio]

I'd like to capture malware using a low interaction honeypot such as nepenthes and then run them within Sandboxie to do behavior analysis. Just so I'm 100% certain, I could do this and there is nearly a 100% chance that I would be safe, right? All writes happen in memory or a specific area on the hard drive?

[tzuk]

They say only two things in life are guaranteed. But yes, Sandboxie should confine all writes to the sandbox folder -- that is the whole point, after all.

[Guest]

Great, I'll give it a try then, thanks!