export interface AegisConfig {
    mode: 'strike' | 'assess';
    environment: 'windows' | 'linux' | 'macos' | 'ad' | 'aws' | 'k8s' | 'network' | 'all';
    evasion: ('amsi-bypass' | 'etw-patch' | 'syscall-obfuscation' | 'unhooking' | 'ja4-rotation' | 'sleep-obfuscation' | 'process-injection' | 'dll-sideloading')[];
    persistence: ('registry-run' | 'scheduled-task' | 'wmi-event' | 'service' | 'startup-folder' | 'logon-script' | 'cron-job' | 'systemd-service')[];
    deployCanaries: boolean;
    canaryTypes: ('decoy-creds' | 'honeypot-file' | 'canary-token' | 'decoy-key' | 'git-token')[];
    staging?: {
        protocols: ('https' | 'dns' | 'icmp' | 'wss')[];
        domainFronting?: {
            provider: 'cloudfront' | 'fastly' | 'akamai' | 'cdn77';
            frontDomain: string;
        };
        ja4Profile?: string;
    };
    assessControls?: string[];
}
export interface AegisResult {
    mode: 'strike' | 'assess';
    appliedEvasion: {
        technique: string;
        success: boolean;
        details: string;
    }[];
    deployedPersistence: {
        mechanism: string;
        path: string;
        trigger: string;
    }[];
    deployedCanaries: {
        type: string;
        location: string;
        hash: string;
        description: string;
    }[];
    stagedPayloads: {
        protocol: string;
        size: number;
        encrypted: boolean;
        hash: string;
    }[];
    detectionScore?: {
        technique: string;
        coverage: 'none' | 'partial' | 'full';
        gap: string;
        recommendation: string;
    }[];
    evasionScore: number;
    artifacts: AegisArtifact[];
}
export interface AegisArtifact {
    id: string;
    type: 'shellcode' | 'dll' | 'script' | 'config' | 'token';
    payload: string;
    hash: string;
    evasionApplied: string[];
    timestamp: string;
}
export declare function runAegis(config: AegisConfig): AegisResult;
//# sourceMappingURL=aegis.d.ts.map