The Malware Analysis appliance analyzes submitted PDF files using JABE and SA-Python engines.
If both engines determine a file is non-malicious with high confidence, the file will not undergo additional, dynamic processing.
The Malware Analysis appliance has a pre-filter tool to analyze XLS and PDF files. It runs YARA scripts to identify if files should go for VM analysis.
Note
Filter and pre-filter analysis are enabled by default.