I’m building a Windows 10 malware analysis sandbox. I’m debating activating Windows or not: I can think of arguments for both:
- For activation: Malware might check the Windows activation status
- Against activation: If I connect this system to a dedicated internet connection, I’ll need to disable the Windows Update services, which could also be a tell for malware
What approach do you recommend?