DLL Injection Lab v0.2.0 — Simulate. Detect. Learn.

Turn a full five-signal DLL-injection telemetry chain into an explainable detection—without injecting a DLL or touching a live process.

What changed

• Added deterministic classic and clean cooperative synthetic scenarios.
• Added ordered actor/target/module correlation mapped to ATT&CK T1055.001.
• Added simulate, detect, demo, and compatibility artifacts CLI modes.
• Added JSONL fixtures plus JSON, Markdown, and SARIF reporting.
• Added an enforced offline boundary and expanded the suite to 32 tests.
• Added a zero-install interactive browser demo.

Try it

pip install dll_injection_lab-0.2.0-py3-none-any.whl
dll-injection-lab demo

Expected result: one high-severity synthetic finding across five events. Run dll-injection-lab demo --scenario cooperative for the zero-finding clean control.

CrossViewLab v0.1.0

First public release of CrossViewLab.\n\n- Compare baseline and observed process-inventory exports\n- Inspect supplied function-entry bytes against baselines and common jump/return prefixes\n- Emit JSON, Markdown, and SARIF\n- Enforce an offline-artifact-only boundary with tests\n- Zero runtime dependencies\n\nValidation: 19 tests across Python 3.10-3.13 in GitHub Actions.