Follow these steps to enable or disable the dropper detection component to perform static analysis on the Malware Analysis appliance.
To enable dropper detection:
Enable the CLI configuration mode.
hostname > enable hostname # configure terminal
Enable the dropper detection component to perform static analysis on the appliance.
hostname (config) # static-analysis dropper enable
Verify that the dropper detection component can perform static analysis on the appliance.
hostname (config) # show static-analysis config
Static Analysis enabled : yes AV-suite enabled : yes SA on AV-suite whitelist enabled : no AV-check enabled : yes Dropper enabled : yes YARA enabled : yes .....
To disable dropper detection:
Enable the CLI configuration mode.
hostname > enable hostname # configure terminal
Disable dropper detection.
hostname (config) # no static-analysis dropper enable
Verify that dropper detection is disabled.
hostname (config) # show static-analysis config
Static Analysis enabled : yes AV-suite enabled : yes SA on AV-suite whitelist enabled : no AV-check enabled : yes Dropper enabled : no YARA enabled : yes .....