Search Engine
Full-text search across titles, headings, tags, descriptions, and body content.
Shortcut: Ctrl + K
Results
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
sandbox detection feature - implementation summary overview added comprehensive sandbox and virtual machine detection to the mutant security module this feature complements existin...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
sandbox detection feature - complete implementation executive summary successfully implemented comprehensive sandbox and virtual machine detection for the mutant security framework...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
sandbox detection feature overview the sandbox detection module identifies containerized and virtualized runtimes and feeds that signal into the runtime tamper-response pipeline cu...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
... capabilities 2 primary runtime events 1 signature_failed 2 debugger_detected 3 sandbox_detected 4 process_protection_detected 5 integrity_failed 6 anti_tamper_probe_error 7 remote_process_scan_error 8 remote_process_suspicious 9 remote_process_critical 10 com...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
... pre-decode - pre-execution 3 action is policy-driven warn delay terminate 5 is sandbox detection implemented yes 1 platform-specific detectors exist for windows linux and macos with stubs where needed 2 runner enforces sandbox checks at pre-decode and pre-exe...
Canonical policies, reference sheets, migration matrices, and source-of-truth documentation.
...cross eval calls api globals supported mutantreplready mutantrepleval mutantreplcomplete mutantreplcompleteline core language supported numbers int float bool string arrays hashes if for functions struct enum features supported declarations literals field acce...
Canonical policies, reference sheets, migration matrices, and source-of-truth documentation.
...rootpid - returns descendant processes for a root pid default current process - sandbox_status - returns sandbox-detection status information - security_diagnostics - returns security diagnostics for the current runtime filesystem - fs_append path data - appen...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...ers atomic counters 1 debugger_detected 2 integrity_failed 3 signature_failed 4 sandbox_detected 5 process_protection_detected 6 anti_tamper_probe_invoked 7 anti_tamper_probe_error 8 remote_process_scan_invoked 9 remote_process_scan_error 10 remote_process_sus...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...driven code-signed telemetry-visible runtime security with staged enforcement 2 completed migration areas 2 1 core runtime security 1 signed artifact verification paths integrated with runner 2 trusted signer pinning is available through secure mode with --sig...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
... standard paranoid 4 anti-debug checks in runner pre-decode and pre-execution 5 sandbox checks in runner pre-decode and pre-execution 6 anti-tamper probe framework with confidence-based signals 7 windows process-protection probes process injection trampoline i...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
security architecture diagrams code-synced 1 end-to-end runtime security flow mermaid diagram 2 policy decision flow mermaid diagram 3 anti-tamper probe gates mermaid diagram 4 runner vs builtin probe scope mermaid diagr...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
anti-tamper probe integration this document explains how anti-tamper probes work today in mutant including the exact enablement gates and how runner enforcement differs from builtin diagnostic calls 1 architecture core f...
ANTITAMPER PROBE ENABLEMENT LLD
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
anti-tamper probe enablement lld 1 purpose this lld defines how anti-tamper probe execution is enabled how runner enforcement is gated and how diagnostics differ from enforcement 2 problem statement users often confuse 1...
PROCESS INJECTION DETECTION LLD
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...el driver implementation - full edr product design --- 3 current implementation summary 3 1 where the logic lives - probe router security antitamper_routing go - probe engine security antitamper_probe go - windows probe implementations security antitamper_wind...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
remote process scan deep dive 1 scope this document describes the current remote process scan architecture and integration points it covers 1 config and mode gates 2 verdict correlation model 3 telemetry and runner enfor...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
1 purpose this document provides end-to-end traceability from security design intent to concrete implementation and validation it maps 1 security requirements and controls 2 implementation anchors functions files 3 runti...
Browser-safe learning snippets for the Mutant playground and quick local testing.
...ons and output mutant 2 40 mutant putln mutant wasm repl putf score d mode s 98 sandbox collections mutant putln first 10 20 30 putln last 10 20 30 putln rest 10 20 30 putln len 10 20 30 40 json mutant let obj tool mutant ok true putln json_stringify obj built...
Big-picture explanations, quick reference material, and definitive orientation docs.
...y model that includes encryption signing anti-tamper checks anti-debugging anti-sandbox checks and bytecode polymorphism the short version if you want a concise answer to what does it do - it automates security and forensic workflows - it can compile mut sourc...
Big-picture explanations, quick reference material, and definitive orientation docs.
final security summary current state this is the consolidated current-state summary for mutant security 1 what is fully in place 1 signed artifact verification paths and secure-mode signer-auth t...
Big-picture explanations, quick reference material, and definitive orientation docs.
...n at two stages 1 pre-decode 2 pre-execution at each stage 1 anti-debug check 2 sandbox check 3 process-protection check if probe gate and process-protection gate allow it this catches tampering both before decode and before vm execution 3 anti-tamper probes s...
Editor integration, implementation workflow, and operational runbooks.
...next steps this guide explains what to implement next without repeating already completed migrations 1 current baseline assumptions already available in codebase 1 signature verification path in runner 2 policy layer and protection profiles 3 anti-debug and sa...
BINARY ARTIFACT SECURITY DEEP DIVE
Bytecode, VM, polymorphism, and execution internals.
...esignerauth false - skips signature verification path - continues to anti-debug sandbox process protection and decode path 3 securemode false - runs compatibility signature verification path - signature failures are policy-driven warn delay terminate 5 standal...
Bytecode, VM, polymorphism, and execution internals.
...eric values are fixed by the declaration order below so do not reorder them 3 1 complete table name operands bytes stack effect description -- ------------------ ------------------------------- ------------------------ -----------------------------------------...
