Search Engine
Full-text search across titles, headings, tags, descriptions, and body content.
Shortcut: Ctrl + K
Results
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
sandbox detection feature - implementation summary overview added comprehensive sandbox and virtual machine detection to the mutant security module this feature complements existin...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
sandbox detection feature - complete implementation executive summary successfully implemented comprehensive sandbox and virtual machine detection for the mutant security framework...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
sandbox detection feature overview the sandbox detection module identifies containerized and virtualized runtimes and feeds that signal into the runtime tamper-response pipeline cu...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
... capabilities 2 primary runtime events 1 signature_failed 2 debugger_detected 3 sandbox_detected 4 process_protection_detected 5 integrity_failed 6 anti_tamper_probe_error 7 remote_process_scan_error 8 remote_process_suspicious 9 remote_process_critical 10 com...
Big-picture explanations, quick reference material, and definitive orientation docs.
...y model that includes encryption signing anti-tamper checks anti-debugging anti-sandbox checks and bytecode polymorphism the short version if you want a concise answer to what does it do - it automates security and forensic workflows - it can compile mut sourc...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...hen multiple are passed 4 is anti-debugging implemented yes 1 platform-specific detection exists in security antidebug_ go 2 runner enforces anti-debug checks at - pre-decode - pre-execution 3 action is policy-driven warn delay terminate 5 is sandbox detection...
Canonical policies, reference sheets, migration matrices, and source-of-truth documentation.
...ing to browser-side javascript and pass data into browser-safe builtins browser sandbox does not expose host filesystem block devices use process exec builtins process__ cmd__ exec_string replace with deterministic in-memory workflows and explicit js integrati...
Canonical policies, reference sheets, migration matrices, and source-of-truth documentation.
...rootpid - returns descendant processes for a root pid default current process - sandbox_status - returns sandbox-detection status information - security_diagnostics - returns security diagnostics for the current runtime filesystem - fs_append path data - appen...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...snapshot export audit log 7 security antidebug_ go - platform-specific debugger detection 8 runner runner go - execution gate and staged enforcement 9 vm vm go - runtime decode path integrity probes policy integration 10 code code go - offset-aware operand rea...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...ipeline 1 anti-debug checks integrated at pre-decode and pre-execution stages 2 sandbox detection integrated at pre-decode and pre-execution stages 3 anti-tamper probe framework integrated and callable from runner and builtins 2 3 process protection 1 runner p...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
... standard paranoid 4 anti-debug checks in runner pre-decode and pre-execution 5 sandbox checks in runner pre-decode and pre-execution 6 anti-tamper probe framework with confidence-based signals 7 windows process-protection probes process injection trampoline i...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
security architecture diagrams code-synced 1 end-to-end runtime security flow mermaid diagram 2 policy decision flow mermaid diagram 3 anti-tamper probe gates mermaid diagram 4 runner vs builtin probe scope mermaid diagr...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
anti-tamper probe integration this document explains how anti-tamper probes work today in mutant including the exact enablement gates and how runner enforcement differs from builtin diagnostic calls 1 architecture core f...
ANTITAMPER PROBE ENABLEMENT LLD
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...on enablement 2 process-protection enforcement enablement 3 policy action after detection this design separates these decisions clearly 3 inputs 3 1 master probe gate runtime setting 1 value 1 means probes run 2 any other value means probes are skipped 3 2 pro...
PROCESS INJECTION DETECTION LLD
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
process injection detection lld 1 purpose this low level design lld explains how mutant currently detects process injection-related tampering and how to expand this into a richer multi-process detec...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
remote process scan deep dive 1 scope this document describes the current remote process scan architecture and integration points it covers 1 config and mode gates 2 verdict correlation model 3 telemetry and runner enfor...
Tamper resistance, sandboxing, remote scan policy, and security deep dives.
...security security_test go security security_test go l295 i t p sec-011 debugger detection must be platform-specific with weighted signal logic on windows anti-debug platform design security antidebug go security antidebug go l29 security antidebug_windows go s...
Browser-safe learning snippets for the Mutant playground and quick local testing.
...ons and output mutant 2 40 mutant putln mutant wasm repl putf score d mode s 98 sandbox collections mutant putln first 10 20 30 putln last 10 20 30 putln rest 10 20 30 putln len 10 20 30 40 json mutant let obj tool mutant ok true putln json_stringify obj built...
Big-picture explanations, quick reference material, and definitive orientation docs.
...minate 3 protection profile defaults minimal standard paranoid 4 anti-debug and sandbox enforcement at pre-decode and pre-execution 5 anti-tamper probe framework with confidence signals 6 windows process-protection probes and runner threshold enforcement 7 vm ...
Big-picture explanations, quick reference material, and definitive orientation docs.
...language 1 policy-driven security mutant does not hardcode one response for all detections 1 a detector raises an event or signal 2 policy decides action using mode profile env configuration 3 action can be warn delay or terminate why this is useful 1 producti...
Editor integration, implementation workflow, and operational runbooks.
...fication path in runner 2 policy layer and protection profiles 3 anti-debug and sandbox staged checks 4 anti-tamper probe framework and windows process-protection probes 5 vm integrity probes and telemetry export 2 phase a documentation and observability harde...
BINARY ARTIFACT SECURITY DEEP DIVE
Bytecode, VM, polymorphism, and execution internals.
...esignerauth false - skips signature verification path - continues to anti-debug sandbox process protection and decode path 3 securemode false - runs compatibility signature verification path - signature failures are policy-driven warn delay terminate 5 standal...
Bytecode, VM, polymorphism, and execution internals.
...per_probe_enablement_lld antitamper_probe_enablement_lld md 2 process_injection_detection_lld process_injection_detection_lld md 3 polymorphic_bytecode_lld polymorphic_bytecode_lld md --- table of contents 1 architecture overview 1-architecture-overview 2 inst...
