DTRSEC REnigma

REnigma is a malware analysis platform that allows analysts to detonate and investigate suspicious URLs and files in an isolated environment. It supports Windows 7 and 10 for detonation, and provides record and replay capability that lets analysts capture a malware execution session and step through it interactively afterward. The platform captures network, file, registry, and memory activity generated during detonation, and offers full-speed interactive detonation so analysts can interact with malware as it runs rather than only observing passive sandbox output. Access is available through a console interface, with API access and a VM management interface offered depending on product tier. REnigma is offered in three tiers: - REnigma Pro: single-user offering for independent researchers, includes console access with API access as an add-on, shared infrastructure with separated client data - REnigma Business: designed for small to medium SOC or analysis teams, includes a dedicated private server, API access, VM management interface, with onsite deployment and custom network as add-ons - REnigma Enterprise: designed for large organizations with SOC, CERT, or research teams, includes private servers, optional onsite or remote deployment, and backup solutions Each tier includes a support package (Bronze, Silver, or Gold respectively) ranging from basic account maintenance to full integration support and priority technical access. DTRSEC also offers hourly support for custom training, malware analysis, and advanced integration work. A free evaluation period is available for all product lines.