WrappCore for Windows / Documentation

Detection

Repeatable detection conditions generated from the project.

Detection

Repeatable detection conditions generated from the project.

  1. REG — registry value or state.
  2. FILE — file presence and optional version.
  3. MSI — ProductCode and product version.
  4. WU — Windows update state.
  5. APPX — application identity and version.
  6. CAP — Windows Capability state.
  7. MARKER — marker created by WrappCore.
  8. Detection groups are source-index aware; existing-package edits keep references synchronized.
WrappCore guidance

WrappCore standardizes the project and execution model. Production deployment must still follow the organization’s test, security and change-management process.