4

AccessData's Cerberus product claims to be :

The first step towards automated reverse engineering, Cerberus allows you to determine the behavior and intent of suspect binaries, giving you actionable intelligence without having to wait for a malware team to perform deeper, more time consuming analysis.

While this may be great for getting basic information about how various malware are functioning, I'm also curious about how much information this tool misses or inaccurately reports.

  • Does anyone have experience with Cerberus?
  • How accurate was this tool when reporting ?
  • Did this tool miss any specific information or patterns ?

closed as too broad by asheeshr Jul 12 '13 at 12:32

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    sounds to me like: 'what do you think of this automated machine that is supposed to replace you and your experience?' / 'what do you think of that expensive machine even if you feel that you could implement this functionality yourself?' – Ange Apr 12 '13 at 17:35
  • 1
    @angealbertini I'm not asking for how people feel about the tool or about the automation of reverse engineering in general, I'm asking for an objective review of the capabilities of the product based on someone's firsthand testing/experimentation. – Dan Apr 12 '13 at 18:09
  • 5
    I'm not sure this site is well-suited to "answering" if Cerberus is worth the investment or even how effective it is at fulfilling its claims. It might be an interesting discussion for a chat room or even an on-going discussion forum, but it's just not well-suited to this type of canonical Q&A format. Sorry about the confusion. See reverseengineering.stackexchange.com/about. If you have any specific questions about the day-to-day use of these tools, I hope you will try again. – Robert Cartaino Apr 12 '13 at 22:32
  • @RobertCartaino There have been a lot of questions asking about which tool to use to do a specific task. Asking whether one of the recommended/suggested tools is effective or not, would be a progression of that. Moreover, this tool would probably have a very limited number of users, and spotting errors in its functioning would require a certain degree of expertise. Taking both of these factors into account, there would be a very limited number of people who would be able to answer this question. – asheeshr Apr 13 '13 at 0:57
  • 1
    Their description of the tool gives the impression of a GUI version of get_relocations + strings for forensics professionals. Significant reverse engineering skill is more honored in it's absence than it's observance among their target demographic and it's clear this tool caters to them. Stick with IDA and Immunity if you are serious. – ŹV - Jun 15 '13 at 3:28

Browse other questions tagged or ask your own question.