Creating VM images

To create and configure Xen images for behavioral analysis of files, PT Sandbox uses the ImageBuilder utility. With this utility, you can do the following:

Create a Windows VM image from an ISO file with the OS installation image.
Create a Windows VM image from a ready-made OS image in QCOW2 format.
Copy and configure the VM image already added to PT Sandbox.

When you create and copy images, the ImageBuilder utility provides access to the local network, which makes it easier to configure the OS on the VM image and install additional software.

The ImageBuilder utility requires access to msdl.microsoft.com. Connections use the HTTP protocol and port 80.

This utility is an application with a command-line interface. On nodes with behavioral analysis, the executable file of the utility is located in the /opt/ptms/sbin/imagebuilder directory by default. You can call the on-screen utility help using the /opt/ptms/sbin/imagebuilder --help command.

If you encounter problems with the ImageBuilder utility, send the imagebuilder.log file saved in the current working directory to Technical Support.