CAPE Sandbox is an Open Source software for automating analysis of suspicious files. To do so it makes use of custom components that monitor the behavior of the malicious processes while running in an isolated environment. This guide will explain how to set up CAPE, use it and customize it.. Create a specific hdd for vm, see Select or create custom storage, press Manage, see next screens. 5.1 Set vm name, size > 100GB and format qcow2. 5.2 Select new created image and press Choose Volume. 6. Select Customize configuration before install, to be able to apply antivms and press finish. 7.