rea-agents - v2.1.0
Preparing search index...
domain/managedNativeVerification
verifyManagedNativeBoundaries
Function verifyManagedNativeBoundaries
verifyManagedNativeBoundaries
(
input
:
{
limits
:
{
max_candidates_per_import
:
number
;
max_native_observations
:
number
;
}
;
managed_boundaries
:
{
analysis_profile
?:
{
digest
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
}
;
provider_profile_schema_version
:
number
;
schema_version
:
1
;
}
;
authority
:
|
"shipped-artifact"
|
"controlled-replay"
|
"historical-reference"
|
"external-service"
|
"analyst-inference"
;
confidence
:
"observed"
|
"derived"
|
"inferred"
;
environment
:
|
{
architecture
:
string
;
id
:
string
;
isolation
:
"process"
|
"none"
|
"container"
|
"virtual-machine"
;
platform
:
string
;
}
|
null
;
evidence_id
:
string
;
evidence_links
:
string
[]
;
limitations
:
string
[]
;
locations
:
(
|
{
address
:
string
;
kind
:
"address"
}
|
{
end
:
string
;
kind
:
"address-range"
;
start
:
string
}
|
{
kind
:
"artifact-path"
;
path
:
string
}
|
{
kind
:
"file-offset"
;
offset
:
number
}
|
{
end
:
number
;
kind
:
"file-offset-range"
;
start
:
number
}
)
[]
;
normalized_result
:
JSONType
;
operation
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
predicate_type
:
string
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
|
null
}
;
raw_result
:
JSONType
;
schema_version
:
2
;
subject
:
|
{
architecture
:
"x86"
|
"x86_64"
|
"arm"
|
"arm64"
|
null
;
digest
:
{
sha256
:
string
}
;
format
:
|
"unknown"
|
"file"
|
"directory"
|
"javascript"
|
"source-map"
|
"plist"
|
"entitlements"
|
"dmg"
|
"zip"
|
"pkg"
|
"asar"
|
"javascript-bundle"
|
"mach-o-universal"
|
"mach-o"
|
"elf"
|
"pe"
|
"hopper"
|
"analysis-database"
|
"ipa"
|
"apk"
;
local_path
:
string
;
name
:
string
;
}
|
null
;
}
;
native_observations
:
{
analysis_profile
?:
{
digest
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
}
;
provider_profile_schema_version
:
number
;
schema_version
:
1
;
}
;
authority
:
|
"shipped-artifact"
|
"controlled-replay"
|
"historical-reference"
|
"external-service"
|
"analyst-inference"
;
confidence
:
"observed"
|
"derived"
|
"inferred"
;
environment
:
|
{
architecture
:
string
;
id
:
string
;
isolation
:
"process"
|
"none"
|
"container"
|
"virtual-machine"
;
platform
:
string
;
}
|
null
;
evidence_id
:
string
;
evidence_links
:
string
[]
;
limitations
:
string
[]
;
locations
:
(
|
{
address
:
string
;
kind
:
"address"
}
|
{
end
:
string
;
kind
:
"address-range"
;
start
:
string
}
|
{
kind
:
"artifact-path"
;
path
:
string
}
|
{
kind
:
"file-offset"
;
offset
:
number
}
|
{
end
:
number
;
kind
:
"file-offset-range"
;
start
:
number
}
)
[]
;
normalized_result
:
JSONType
;
operation
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
predicate_type
:
string
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
|
null
}
;
raw_result
:
JSONType
;
schema_version
:
2
;
subject
:
|
{
architecture
:
"x86"
|
"x86_64"
|
"arm"
|
"arm64"
|
null
;
digest
:
{
sha256
:
string
}
;
format
:
|
"unknown"
|
"file"
|
"directory"
|
"javascript"
|
"source-map"
|
"plist"
|
"entitlements"
|
"dmg"
|
"zip"
|
"pkg"
|
"asar"
|
"javascript-bundle"
|
"mach-o-universal"
|
"mach-o"
|
"elf"
|
"pe"
|
"hopper"
|
"analysis-database"
|
"ipa"
|
"apk"
;
local_path
:
string
;
name
:
string
;
}
|
null
;
}
[]
;
unknown_registry_approved
?:
true
;
}
,
)
:
{
algorithm
:
{
name
:
"rea-managed-native-verification"
;
token_identity
:
"build-local"
;
token_to_address_mapping
:
"not-inferred"
;
version
:
1
;
}
;
coverage
:
{
omitted_candidates
:
number
;
omitted_native_observations
:
number
;
status
:
"truncated"
|
"partial"
|
"complete-within-inputs"
;
}
;
evidence_links
:
string
[]
;
limitations
:
string
[]
;
managed_boundary
:
{
artifact_path
:
string
;
artifact_sha256
:
string
;
coverage_state
:
"unavailable"
|
"complete"
|
"partial"
;
evidence_id
:
string
;
metadata_status
:
"complete"
|
"partial"
|
"malformed"
|
"absent"
;
mvid
:
string
|
null
;
native_implementations_total
:
number
;
pinvoke_imports_total
:
number
;
}
;
native_implementations
:
{
reason
:
string
;
unresolved
:
number
}
;
native_observations
:
{
accepted
:
number
;
symbols
:
number
;
total
:
number
;
truncated
:
boolean
;
unsupported
:
number
;
}
;
pinvoke_imports
:
{
basis
:
|
"exact-export-name"
|
"exact-function-name"
|
"decorated-name-candidate"
|
"module-mismatch"
|
"no-native-candidate"
|
"unsupported-native-evidence"
;
candidates
:
{
address
:
string
|
null
;
evidence_id
:
string
;
module_name
:
string
|
null
;
module_path
:
string
|
null
;
name
:
string
;
operation
:
string
;
source
:
"macho-export"
|
"function-dossier"
;
}
[]
;
confidence
:
"unknown"
|
"observed"
|
"inferred"
;
evidence_links
:
string
[]
;
item_id
:
string
;
limitations
:
string
[]
;
managed
:
{
call_convention
:
|
"unknown"
|
"not-specified"
|
"winapi"
|
"cdecl"
|
"stdcall"
|
"thiscall"
|
"fastcall"
;
char_set
:
"unknown"
|
"auto"
|
"not-specified"
|
"ansi"
|
"unicode"
;
declaration_verification
:
"managed-declaration-only"
;
import_name
:
string
;
import_scope_name
:
string
|
null
;
member_name
:
string
|
null
;
member_token
:
string
|
null
;
no_mangle
:
boolean
;
token
:
string
;
}
;
matched_native
:
|
{
address
:
string
|
null
;
evidence_id
:
string
;
module_name
:
string
|
null
;
module_path
:
string
|
null
;
name
:
string
;
operation
:
string
;
source
:
"macho-export"
|
"function-dossier"
;
}
|
null
;
status
:
"verified"
|
"contradicted"
|
"inferred"
|
"unresolved"
;
}
[]
;
schema_version
:
1
;
summary
:
{
contradicted
:
number
;
inferred
:
number
;
native_body_unresolved
:
number
;
unresolved
:
number
;
verified
:
number
;
}
;
verification_id
:
string
;
}
Verify managed P/Invoke declarations against authenticated native Evidence.
Parameters
input
:
{
limits
:
{
max_candidates_per_import
:
number
;
max_native_observations
:
number
;
}
;
managed_boundaries
:
{
analysis_profile
?:
{
digest
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
}
;
provider_profile_schema_version
:
number
;
schema_version
:
1
;
}
;
authority
:
|
"shipped-artifact"
|
"controlled-replay"
|
"historical-reference"
|
"external-service"
|
"analyst-inference"
;
confidence
:
"observed"
|
"derived"
|
"inferred"
;
environment
:
|
{
architecture
:
string
;
id
:
string
;
isolation
:
"process"
|
"none"
|
"container"
|
"virtual-machine"
;
platform
:
string
;
}
|
null
;
evidence_id
:
string
;
evidence_links
:
string
[]
;
limitations
:
string
[]
;
locations
:
(
|
{
address
:
string
;
kind
:
"address"
}
|
{
end
:
string
;
kind
:
"address-range"
;
start
:
string
}
|
{
kind
:
"artifact-path"
;
path
:
string
}
|
{
kind
:
"file-offset"
;
offset
:
number
}
|
{
end
:
number
;
kind
:
"file-offset-range"
;
start
:
number
}
)
[]
;
normalized_result
:
JSONType
;
operation
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
predicate_type
:
string
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
|
null
}
;
raw_result
:
JSONType
;
schema_version
:
2
;
subject
:
|
{
architecture
:
"x86"
|
"x86_64"
|
"arm"
|
"arm64"
|
null
;
digest
:
{
sha256
:
string
}
;
format
:
|
"unknown"
|
"file"
|
"directory"
|
"javascript"
|
"source-map"
|
"plist"
|
"entitlements"
|
"dmg"
|
"zip"
|
"pkg"
|
"asar"
|
"javascript-bundle"
|
"mach-o-universal"
|
"mach-o"
|
"elf"
|
"pe"
|
"hopper"
|
"analysis-database"
|
"ipa"
|
"apk"
;
local_path
:
string
;
name
:
string
;
}
|
null
;
}
;
native_observations
:
{
analysis_profile
?:
{
digest
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
}
;
provider_profile_schema_version
:
number
;
schema_version
:
1
;
}
;
authority
:
|
"shipped-artifact"
|
"controlled-replay"
|
"historical-reference"
|
"external-service"
|
"analyst-inference"
;
confidence
:
"observed"
|
"derived"
|
"inferred"
;
environment
:
|
{
architecture
:
string
;
id
:
string
;
isolation
:
"process"
|
"none"
|
"container"
|
"virtual-machine"
;
platform
:
string
;
}
|
null
;
evidence_id
:
string
;
evidence_links
:
string
[]
;
limitations
:
string
[]
;
locations
:
(
|
{
address
:
string
;
kind
:
"address"
}
|
{
end
:
string
;
kind
:
"address-range"
;
start
:
string
}
|
{
kind
:
"artifact-path"
;
path
:
string
}
|
{
kind
:
"file-offset"
;
offset
:
number
}
|
{
end
:
number
;
kind
:
"file-offset-range"
;
start
:
number
}
)
[]
;
normalized_result
:
JSONType
;
operation
:
string
;
parameters
:
Record
<
string
,
JSONType
>
;
predicate_type
:
string
;
provider
:
{
id
:
string
;
name
:
string
;
version
:
string
|
null
}
;
raw_result
:
JSONType
;
schema_version
:
2
;
subject
:
|
{
architecture
:
"x86"
|
"x86_64"
|
"arm"
|
"arm64"
|
null
;
digest
:
{
sha256
:
string
}
;
format
:
|
"unknown"
|
"file"
|
"directory"
|
"javascript"
|
"source-map"
|
"plist"
|
"entitlements"
|
"dmg"
|
"zip"
|
"pkg"
|
"asar"
|
"javascript-bundle"
|
"mach-o-universal"
|
"mach-o"
|
"elf"
|
"pe"
|
"hopper"
|
"analysis-database"
|
"ipa"
|
"apk"
;
local_path
:
string
;
name
:
string
;
}
|
null
;
}
[]
;
unknown_registry_approved
?:
true
;
}
Returns
{
algorithm
:
{
name
:
"rea-managed-native-verification"
;
token_identity
:
"build-local"
;
token_to_address_mapping
:
"not-inferred"
;
version
:
1
;
}
;
coverage
:
{
omitted_candidates
:
number
;
omitted_native_observations
:
number
;
status
:
"truncated"
|
"partial"
|
"complete-within-inputs"
;
}
;
evidence_links
:
string
[]
;
limitations
:
string
[]
;
managed_boundary
:
{
artifact_path
:
string
;
artifact_sha256
:
string
;
coverage_state
:
"unavailable"
|
"complete"
|
"partial"
;
evidence_id
:
string
;
metadata_status
:
"complete"
|
"partial"
|
"malformed"
|
"absent"
;
mvid
:
string
|
null
;
native_implementations_total
:
number
;
pinvoke_imports_total
:
number
;
}
;
native_implementations
:
{
reason
:
string
;
unresolved
:
number
}
;
native_observations
:
{
accepted
:
number
;
symbols
:
number
;
total
:
number
;
truncated
:
boolean
;
unsupported
:
number
;
}
;
pinvoke_imports
:
{
basis
:
|
"exact-export-name"
|
"exact-function-name"
|
"decorated-name-candidate"
|
"module-mismatch"
|
"no-native-candidate"
|
"unsupported-native-evidence"
;
candidates
:
{
address
:
string
|
null
;
evidence_id
:
string
;
module_name
:
string
|
null
;
module_path
:
string
|
null
;
name
:
string
;
operation
:
string
;
source
:
"macho-export"
|
"function-dossier"
;
}
[]
;
confidence
:
"unknown"
|
"observed"
|
"inferred"
;
evidence_links
:
string
[]
;
item_id
:
string
;
limitations
:
string
[]
;
managed
:
{
call_convention
:
|
"unknown"
|
"not-specified"
|
"winapi"
|
"cdecl"
|
"stdcall"
|
"thiscall"
|
"fastcall"
;
char_set
:
"unknown"
|
"auto"
|
"not-specified"
|
"ansi"
|
"unicode"
;
declaration_verification
:
"managed-declaration-only"
;
import_name
:
string
;
import_scope_name
:
string
|
null
;
member_name
:
string
|
null
;
member_token
:
string
|
null
;
no_mangle
:
boolean
;
token
:
string
;
}
;
matched_native
:
|
{
address
:
string
|
null
;
evidence_id
:
string
;
module_name
:
string
|
null
;
module_path
:
string
|
null
;
name
:
string
;
operation
:
string
;
source
:
"macho-export"
|
"function-dossier"
;
}
|
null
;
status
:
"verified"
|
"contradicted"
|
"inferred"
|
"unresolved"
;
}
[]
;
schema_version
:
1
;
summary
:
{
contradicted
:
number
;
inferred
:
number
;
native_body_unresolved
:
number
;
unresolved
:
number
;
verified
:
number
;
}
;
verification_id
:
string
;
}
Settings
Member Visibility
Protected
Inherited
Theme
OS
Light
Dark
rea-agents - v2.1.0
Loading...
Verify managed P/Invoke declarations against authenticated native Evidence.