Follow these steps to enable or disable analysis of URLs that are embedded in PDF and Microsoft Office files of an email message on the Malware Analysis appliance.
To enable analysis of embedded URLs in files:
Enable the CLI configuration mode.
hostname > enable hostname # configure terminal
Enable analysis of URLs that are embedded in files on the appliance.
hostname (config) # static-analysis embedded-urls enable
Verify the status of embedded URL analysis in files.
hostname (config) # show static-analysis config Static Analysis enabled : yes AV-suite enabled : yes SA on AV-suite whitelist enabled : no AV-check enabled : yes Dropper enabled : yes YARA enabled : yes Embedded object extraction enabled : yes Embedded URL extraction enabled : yes ......
The "Embedded URL extraction enabled:" line displays "yes" if embedded URL analysis is enabled.
To disable analysis of embedded URLs in files:
Enable the CLI configuration mode.
hostname > enable hostname # configure terminal
Disable analysis of URLs that are embedded in files on the appliance.
hostname (config) # no static-analysis embedded-urls enable
Verify the status of embedded URL analysis in files.
hostname (config) # show static-analysis config Static Analysis enabled : yes AV-suite enabled : yes SA on AV-suite whitelist enabled : no AV-check enabled : yes Dropper enabled : yes YARA enabled : yes Embedded object extraction enabled : yes Embedded URL extraction enabled : no ...
The "Embedded URL extraction enabled:" line displays "no" if embedded URL analysis is disabled.