Function planManagedRuntimeCorrelation

Parameters

• input: {
      bounds: {
          allow_network: false;
          allow_ui: false;
          max_output_bytes: number;
          max_threads: number;
          timeout_ms: number;
      };
      host: {
          architecture: "x86"
          | "x86_64"
          | "arm"
          | "arm64";
          clr_family: "unknown" | "dotnet-framework" | "dotnet" | "mono";
          os: "linux" | "macos" | "windows";
      };
      method: {
          normalized_il_sha256: string
          | null;
          signature_sha256: string;
          token: string;
      };
      requested_effect: | "attach"
      | "load"
      | "debugger"
      | "reflection"
      | "instrumentation";
      static_members: {
          analysis_profile?: {
              digest: string;
              parameters: Record<string, JSONType>;
              provider: { id: string; name: string; version: string };
              provider_profile_schema_version: number;
              schema_version: 1;
          };
          authority: | "shipped-artifact"
          | "controlled-replay"
          | "historical-reference"
          | "external-service"
          | "analyst-inference";
          confidence: "observed"
          | "derived"
          | "inferred";
          environment:
              | {
                  architecture: string;
                  id: string;
                  isolation: "process"
                  | "none"
                  | "container"
                  | "virtual-machine";
                  platform: string;
              }
              | null;
          evidence_id: string;
          evidence_links: string[];
          limitations: string[];
          locations: (
              | { address: string; kind: "address" }
              | { end: string; kind: "address-range"; start: string }
              | { kind: "artifact-path"; path: string }
              | { kind: "file-offset"; offset: number }
              | { end: number; kind: "file-offset-range"; start: number }
          )[];
          normalized_result: JSONType;
          operation: string;
          parameters: Record<string, JSONType>;
          predicate_type: string;
          provider: { id: string; name: string; version: string | null };
          raw_result: JSONType;
          schema_version: 2;
          subject:
              | {
                  architecture: "x86"
                  | "x86_64"
                  | "arm"
                  | "arm64"
                  | null;
                  digest: { sha256: string };
                  format:
                      | "unknown"
                      | "file"
                      | "directory"
                      | "javascript"
                      | "source-map"
                      | "plist"
                      | "entitlements"
                      | "dmg"
                      | "zip"
                      | "pkg"
                      | "asar"
                      | "javascript-bundle"
                      | "mach-o-universal"
                      | "mach-o"
                      | "elf"
                      | "pe"
                      | "hopper"
                      | "analysis-database"
                      | "ipa"
                      | "apk";
                  local_path: string;
                  name: string;
              }
              | null;
      };
      unknown_registry_approved?: true;
  }
• executablePath: string
• permissionGrantId: string