A friend of mine has given me a USB with many files in it, How can I just protect my system from all contents of that USB using the sandbox?
First thing to do from a security point of view is of course to disable all autorun facilities from all USB and CD/DVD devices.
When you are running an unknown file CIS will automatically sandbox it. The sandboxing will protect you.