NASTYWARE - Detecting and Preventing Ransomwares

NASTYWARE is a solution to detect and prevent incident evolving ransomwares, that uses continuous network and machine monitoring tools to colect necessary asset logs. Therefore, institution managers and incident response teams can gain adequate visibility into cyber events taking place.

Testbed for malware executions and logs collection

This testbed was made and tested on the host configuration

• Windows 10
• Vagrant 2.2.9
• Virtualbox 6.1.6

Using/Reproducing this testbed

$ git clone https://github.com/c2dc/nastyware.git
$ vagrant up

Testbed architecture

Install chocolatey, wazuh client, osquery.