# box-js > JavaScript sandbox for analyzing malicious scripts by emulating browser/WScript APIs - Run box-js: `box-js --output-dir=/tmp suspicious.js`