Project overview
LitterBox is a self-hosted analysis sandbox for authorized red-team and blue-team testing. It can run static, dynamic, and EDR-oriented checks on uploaded samples, then present a detection score and the indicators that triggered results. Optional integration dispatches a sample to a separate Windows VM instrumented with supported EDR tooling and returns correlated alerts. The project is for development and security laboratories only and must run in an isolated VM or dedicated test environment, not in production.
Repository facts
- Primary language
- YARA
- License
- GPL-3.0
- Repository updated
- Jul 14, 2026
- Default branch
- main
Resource types
Web app
Use cases
Security and privacyTesting and debugging
Operating systems
LinuxWindows
Runtime
DockerSandboxedSelf-hosted