windows-sandbox-detonate
See what an untrusted file or script does by running it in an isolated, throwaway Windows Sandbox with no network, using sbx or the optional MCP adapter. Use when asked what a suspicious exe, script, msi or attachment does, or what processes, persistence and network activity it causes.
Pinned to revision d14c7284d2a4, so it is the text this page describes rather than whatever the author pushed since.
Files
Every link opens the file at its source, pinned to the revision this page describes.