hatching/vmcloak

procmon.xml file in log directory does not created and bson file is created instead

Opened this issue · 0 comments

what I did exactly the next
1- enable the procmon in processing.conf
2- extend the values of upload_max_size, and analysis_size_limit at cuckoo.cinf
3- set the procmon=1 as option when submit the sample using command line
I need to collect the system calls that have to be in the procmon.xml file that must be created in the log directory of the analysis file but unfortunately this file is not created, instead I got bson file.
could you tell me how to get the system calls using cuckoo sandbox without using kernel driver