The Check Point ThreatCloud Emulation Service is a service that that integrates with Endpoint Privilege Manager (EPM) and analyzes files in a sandbox environment, removes any exploitable elements such as macros and embedded objects, and produces a report about the file contents including details of potential malicious behavior.