Sandbox Analyzer submissions

Question

Hi,

When automatic file submission to the Sandbox is enabled in the Bitdefender GravityZone BEST (EDR) policy, are the files submitted to the Sandbox accessible to others (e.g., the public)?

Can other customers or third parties view the submitted files, any information about those files, or the analysis results?

Also, how long are the submitted files retained in the Sandbox before they are deleted?

Andrei_S Enterprise · Accepted Answer

Hello @UG ,

When you enable automatic file submission to the Bitdefender Sandbox via your GravityZone BEST (EDR) policy, your data remains strictly confidential. Files, metadata, and the resulting analysis reports are stored and processed within a secure, isolated environment.

These assets are not accessible to the public, other GravityZone customers, or third parties.

While Bitdefender utilizes threat intelligence (such as IoCs or the malicious status of a file) to enhance global protection for all customers, this process does not involve sharing your specific submitted files, private metadata, or individual analysis reports.

Data Retention

Samples submitted to Cloud Sandbox Analyzer are deleted immediately after detonation.

Samples submitted to Sandbox Analyzer On-premises are available by default for 14 days. Users can extend this period up to 730 days in the Sandbox Manager section of Control Center.

https://www.bitdefender.com/business/support/en/77212-151423-retention-policies.html#UUID-bf53f627-bc1f-a920-703a-f4c60d102aca

Kind Regards,

Andrei