Search Engine
Full-text search across titles, headings, tags, descriptions, and body content.
Shortcut: Ctrl + K
Results
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
anti-tamper probe integration this document explains how anti-tamper probes work today in mutant including the exact enablement gates and how runner enforcement differs from builtin diagnostic...
PROCESS INJECTION DETECTION LLD
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...privileges --- 2 scope in scope - windows process-injection related anti-tamper probes - runner-side enforcement and confidence thresholding - future architecture for cross-process detection - data model scoring and rollout plan out of scope - offensive code o...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
..._lld security_lld md 2 security_lld_traceability security_lld_traceability md 3 antitamper_probe_enablement_lld antitamper_probe_enablement_lld md if roadmap wording and lld differ update this file to match lld semantics 1 current baseline implemented now 1 si...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...sec-008 runtime integrity checks must detect instruction tampering vm integrity probes vm vm go vm vm go l333 vm vm go vm vm go l662 vm vm go vm vm go l681 policy secure default behavior vm vm_security_policy_test go vm vm_security_policy_test go l11 i t c sec...
Editor integration, implementation workflow, and operational runbooks.
...er and protection profiles 3 anti-debug and sandbox staged checks 4 anti-tamper probe framework and windows process-protection probes 5 vm integrity probes and telemetry export 2 phase a documentation and observability hardening 1 keep all security docs aligne...
Big-picture explanations, quick reference material, and definitive orientation docs.
...nti-debug and sandbox enforcement at pre-decode and pre-execution 5 anti-tamper probe framework with confidence signals 6 windows process-protection probes and runner threshold enforcement 7 vm runtime integrity probing and telemetry export 8 remote process sc...
Big-picture explanations, quick reference material, and definitive orientation docs.
...s injection detection implemented yes as part of anti-tamper process-protection probes 1 probe execution requires runtime setting 1 2 runner enforcement path is additionally controlled by runtime setting 3 high-confidence signals detected true and confidence 8...
Canonical policies, reference sheets, migration matrices, and source-of-truth documentation.
...same concept current model 1 signal generation is separate from policy action 2 probe gates mermaid diagram 3 process protection scope mermaid diagram 4 remote scan gate model mermaid diagram 5 polymorphic status snapshot mermaid diagram 6 memory hardening sna...
Big-picture explanations, quick reference material, and definitive orientation docs.
... at each stage 1 anti-debug check 2 sandbox check 3 process-protection check if probe gate and process-protection gate allow it this catches tampering both before decode and before vm execution 3 anti-tamper probes signal model each probe returns 1 name 2 dete...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
..._lld security_lld md 2 security_lld_traceability security_lld_traceability md 3 antitamper_probe_enablement_lld antitamper_probe_enablement_lld md 4 binary_artifact_security_deep_dive binary_artifact_security_deep_dive md 5 remote_process_scan_deep_dive remote...
ANTITAMPER PROBE ENABLEMENT LLD
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
anti-tamper probe enablement lld 1 purpose this lld defines how anti-tamper probe execution is enabled how runner enforcement is gated and how diagnostics differ from enforcement 2 problem sta...
Big-picture explanations, quick reference material, and definitive orientation docs.
...esponse plumbing - anti-debug checks - anti-sandbox checks - process protection probes - and remote process scan hooks the detection helpers are implemented in the security security package including - security antidebug go security antidebug go - security san...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...urity flow mermaid diagram 2 policy decision flow mermaid diagram 3 anti-tamper probe gates mermaid diagram 4 runner vs builtin probe scope mermaid diagram 5 vm integrity scheduling mermaid diagram 6 polymorphic engine reality snapshot mermaid diagram note 1 m...
Bytecode, VM, polymorphism, and execution internals.
...lout status especially anti-tamper gates and polymorphic activation depth use 1 antitamper_probe_enablement_lld antitamper_probe_enablement_lld md 2 process_injection_detection_lld process_injection_detection_lld md 3 polymorphic_bytecode_lld polymorphic_bytec...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...ndbox detection integrated at pre-decode and pre-execution stages 3 anti-tamper probe framework integrated and callable from runner and builtins 2 3 process protection 1 runner process-protection enforcement path implemented 2 windows-specific process protecti...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...xecution gate and staged enforcement 9 vm vm go - runtime decode path integrity probes policy integration 10 code code go - offset-aware operand reads 11 object secure_memory go - secure wrappers and object offset conventions --- 6 artifact format and cryptogr...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...s process injection detection implemented yes as anti-tamper process-protection probes important gates 1 runtime setting 1 must be set to run probes 2 runtime setting controls runner enforcement once probes are enabled runner enforcement probes 1 process_injec...
Canonical policies, reference sheets, migration matrices, and source-of-truth documentation.
...e integrity - vm integrity checks run periodically with seeded jitter and sweep probes - tamper detection triggers policy-driven response and telemetry 4 anti-debugging - pre-decode and pre-execution debugger checks run in the launcher path - platform-specific...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...antics runner path 1 called in anti-rev pipeline after local process protection probes 2 executed at both pre-decode and pre-execution stages decision behavior 1 observe mode - never blocks execution - keeps telemetry for visibility 2 enforce mode - blocks onl...
