Question about sandboxing

Discussion in 'sandboxing & virtualization' started by Hugger, Oct 16, 2008.

Thread Status:
Not open for further replies.
  1. Hugger

    Hugger Registered Member

    Joined:
    Oct 27, 2007
    Posts:
    1,003
    Location:
    Hackensack, USA
    There are many products out there that seem to do just about the same job.
    So my question is what are the differences between a product like Sandboxie and Shadow Defender or Returnil?
    Thanks.
    Hugger
     
  2. Franklin

    Franklin Registered Member

    Joined:
    May 12, 2005
    Posts:
    2,517
    Location:
    West Aussie
    Shadow Defender and Returnil allow all system resources to be used with a reboot required to delete any changes.

    You could think of Sandboxie's working/storage folder as a recycle bin where Sandboxie caches everything into this recycle bin that allows an app to run but only run within the confines of the recycle bin.

    Delete the contents of this recycle bin and you start with an empty bin without the need for a reboot.

    Just a brief summary and for testing of any reboot required software installs then VM's are the way to go.

    Horses for different courses.;)
     
  3. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    other then what franklin had already said,You can use sandboxie and Returnil or shadow Defender for on Demand.Example if want to test a malware sample or perhaps explore the darkside you can fireup Retunil or SD on the unlikely hood something escaped the sandboxie a reboot would erase any changes.Using both for different situation and Hense would not be redundant to have both on board.
     
  4. virtumonde

    virtumonde Registered Member

    Joined:
    Jan 18, 2008
    Posts:
    504
    Another difference is that you can't install drivers in sandboxie .You can install(test)more type of applications,games in shadow defender,or returnil.
     
  5. Hugger

    Hugger Registered Member

    Joined:
    Oct 27, 2007
    Posts:
    1,003
    Location:
    Hackensack, USA
    Thanks, guys.
    Good explanations.
    Hugger
     
  6. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Another big factor. You can do something in the sandbox and it's there until you delete it including thru reboot. Not true with Returnil and Shadowdefender.
     
  7. Huupi

    Huupi Registered Member

    Joined:
    Sep 2, 2006
    Posts:
    2,024
    For testing purposes VM is a better option,SBIE has some restrictions which is mostly driver related.
     
  8. raakii

    raakii Registered Member

    Joined:
    Sep 1, 2008
    Posts:
    593
    Shadow user and comodo diskshield allows testing reboot softwares
     
  9. Huupi

    Huupi Registered Member

    Joined:
    Sep 2, 2006
    Posts:
    2,024
    Comodo Diskshield is just like Returnil,all changes made to the system in Shield mode are lost upon reboot.Same with Shadow User !!
    So there's nothing new on the horizon.

    If you like testing softwares which require a reboot then VM's are good to go.Snapshots in which you test software can be saved.
     
    Last edited: Oct 18, 2008
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.