rea-agents - v2.1.0
    Preparing search index...
    • Plan runtime correlation from input parsed by a trusted adapter.

      Parameters

      • dependencies: ManagedRuntimeCorrelationDependencies
      • input: {
            bounds: {
                allow_network: false;
                allow_ui: false;
                max_output_bytes: number;
                max_threads: number;
                timeout_ms: number;
            };
            host: {
                architecture: "x86"
                | "x86_64"
                | "arm"
                | "arm64";
                clr_family: "unknown" | "dotnet-framework" | "dotnet" | "mono";
                os: "linux" | "macos" | "windows";
            };
            method: {
                normalized_il_sha256: string
                | null;
                signature_sha256: string;
                token: string;
            };
            requested_effect: | "attach"
            | "load"
            | "debugger"
            | "reflection"
            | "instrumentation";
            static_members: {
                analysis_profile?: {
                    digest: string;
                    parameters: Record<string, JSONType>;
                    provider: { id: string; name: string; version: string };
                    provider_profile_schema_version: number;
                    schema_version: 1;
                };
                authority: | "shipped-artifact"
                | "controlled-replay"
                | "historical-reference"
                | "external-service"
                | "analyst-inference";
                confidence: "observed"
                | "derived"
                | "inferred";
                environment:
                    | {
                        architecture: string;
                        id: string;
                        isolation: "process"
                        | "none"
                        | "container"
                        | "virtual-machine";
                        platform: string;
                    }
                    | null;
                evidence_id: string;
                evidence_links: string[];
                limitations: string[];
                locations: (
                    | { address: string; kind: "address" }
                    | { end: string; kind: "address-range"; start: string }
                    | { kind: "artifact-path"; path: string }
                    | { kind: "file-offset"; offset: number }
                    | { end: number; kind: "file-offset-range"; start: number }
                )[];
                normalized_result: JSONType;
                operation: string;
                parameters: Record<string, JSONType>;
                predicate_type: string;
                provider: { id: string; name: string; version: string | null };
                raw_result: JSONType;
                schema_version: 2;
                subject:
                    | {
                        architecture: "x86"
                        | "x86_64"
                        | "arm"
                        | "arm64"
                        | null;
                        digest: { sha256: string };
                        format:
                            | "unknown"
                            | "file"
                            | "directory"
                            | "javascript"
                            | "source-map"
                            | "plist"
                            | "entitlements"
                            | "dmg"
                            | "zip"
                            | "pkg"
                            | "asar"
                            | "javascript-bundle"
                            | "mach-o-universal"
                            | "mach-o"
                            | "elf"
                            | "pe"
                            | "hopper"
                            | "analysis-database"
                            | "ipa"
                            | "apk";
                        local_path: string;
                        name: string;
                    }
                    | null;
            };
            unknown_registry_approved?: true;
        }

      Returns Promise<
          Result<
              | {
                  analysis_profile: {
                      digest: string;
                      parameters: Record<string, JSONType>;
                      provider: { id: string; name: string; version: string };
                      provider_profile_schema_version: number;
                      schema_version: 1;
                  };
                  authority: | "shipped-artifact"
                  | "controlled-replay"
                  | "historical-reference"
                  | "external-service"
                  | "analyst-inference";
                  confidence: "observed"
                  | "derived"
                  | "inferred";
                  environment:
                      | {
                          architecture: string;
                          id: string;
                          isolation: "process"
                          | "none"
                          | "container"
                          | "virtual-machine";
                          platform: string;
                      }
                      | null;
                  evidence_id: string;
                  evidence_links: string[];
                  limitations: string[];
                  locations: (
                      | { address: string; kind: "address" }
                      | { end: string; kind: "address-range"; start: string }
                      | { kind: "artifact-path"; path: string }
                      | { kind: "file-offset"; offset: number }
                      | { end: number; kind: "file-offset-range"; start: number }
                  )[];
                  normalized_result: JSONType;
                  operation: string;
                  parameters: Record<string, JSONType>;
                  predicate_type: string;
                  provider: { id: string; name: string; version: string | null };
                  raw_result: JSONType;
                  schema_version: 2;
                  subject:
                      | {
                          architecture: "x86"
                          | "x86_64"
                          | "arm"
                          | "arm64"
                          | null;
                          digest: { sha256: string };
                          format:
                              | "unknown"
                              | "file"
                              | "directory"
                              | "javascript"
                              | "source-map"
                              | "plist"
                              | "entitlements"
                              | "dmg"
                              | "zip"
                              | "pkg"
                              | "asar"
                              | "javascript-bundle"
                              | "mach-o-universal"
                              | "mach-o"
                              | "elf"
                              | "pe"
                              | "hopper"
                              | "analysis-database"
                              | "ipa"
                              | "apk";
                          local_path: string;
                          name: string;
                      }
                      | null;
              }
              | {
                  authority: | "shipped-artifact"
                  | "controlled-replay"
                  | "historical-reference"
                  | "external-service"
                  | "analyst-inference";
                  confidence: "observed"
                  | "derived"
                  | "inferred";
                  environment:
                      | {
                          architecture: string;
                          id: string;
                          isolation: "process"
                          | "none"
                          | "container"
                          | "virtual-machine";
                          platform: string;
                      }
                      | null;
                  evidence_id: string;
                  evidence_links: string[];
                  limitations: string[];
                  locations: (
                      | { address: string; kind: "address" }
                      | { end: string; kind: "address-range"; start: string }
                      | { kind: "artifact-path"; path: string }
                      | { kind: "file-offset"; offset: number }
                      | { end: number; kind: "file-offset-range"; start: number }
                  )[];
                  normalized_result: JSONType;
                  operation: string;
                  parameters: Record<string, JSONType>;
                  predicate_type: string;
                  provider: { id: string; name: string; version: string | null };
                  raw_result: JSONType;
                  schema_version: 2;
                  subject:
                      | {
                          architecture: "x86"
                          | "x86_64"
                          | "arm"
                          | "arm64"
                          | null;
                          digest: { sha256: string };
                          format:
                              | "unknown"
                              | "file"
                              | "directory"
                              | "javascript"
                              | "source-map"
                              | "plist"
                              | "entitlements"
                              | "dmg"
                              | "zip"
                              | "pkg"
                              | "asar"
                              | "javascript-bundle"
                              | "mach-o-universal"
                              | "mach-o"
                              | "elf"
                              | "pe"
                              | "hopper"
                              | "analysis-database"
                              | "ipa"
                              | "apk";
                          local_path: string;
                          name: string;
                      }
                      | null;
              },
              AnalysisError,
          >,
      >