{"id":22830,"date":"2020-07-08T00:23:00","date_gmt":"2020-07-07T21:23:00","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/microsofts-project-freta-is-intended-to-stop-malware-in-azure\/"},"modified":"2020-07-08T00:23:00","modified_gmt":"2020-07-07T21:23:00","slug":"microsofts-project-freta-is-intended-to-stop-malware-in-azure","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/microsofts-project-freta-is-intended-to-stop-malware-in-azure\/","title":{"rendered":"#Microsoft\u2019s Project Freta is intended to stop malware in Azure"},"content":{"rendered":"

“#Microsoft\u2019s Project Freta is intended to stop malware in Azure<\/strong>”<\/p>\n

\n
Project Freta is a new Microsoft Research project introduces a virtual-machine (VM) forensics platform that stops malware. Users will be able to utilize Freta to find malicious software in the cloud.<\/p>\n

RECOMMENDED: Click here to fix Windows errors and optimize system performance<\/p>\n

\"Project<\/img><\/p>\n

As the Project Freta comes from Microsoft Research, the company classifies it as a ‘technology<\/a> demonstration’.<\/p>\n

It captures a snapshot of a VM (supports Hyper-V and VMWare),\u00a0 and then inspects its contents for malware existence. <\/span>To achieve this functionality, the user should sign in on the Project Freta web site and then submit VM images used in the special Azure region.\u00a0<\/span><\/p>\n

The official announcement says:<\/p>\n

\n

The Project Freta analysis engine consumes snapshots of whole-system Linux volatile memory and extracts an enumeration of system objects. Some kernel hooking identification is performed automatically; this can be used by analysts to detect novel rootkits. The analysis portal is available in prototype form for public use:\u00a0https:\/\/freta.azurewebsites.net.<\/p>\n

The prototype portal supports many types of memory snapshots as inputs. Currently, only a Hyper-V checkpoint has been evaluated to provide a reasonable app<\/a>roximation of the \u201celement of surprise\u201d necessary to achieve trusted sensing:<\/p>\n