VirtualBox is used by Cuckoo and Ansible as a malware sandbox. VirtualBox needs to be installed as described under the following link: [link]

If your host machine is already a virtual machine, please ensure that nested virtualization is possible. After the malware analysis und use case testing, VirtualBox reverts the virtual machines to snapshots. After installing and configuring the VMs (described in cuckoo, Splunk) a snapshot is necessary.