Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.
SECRET//ORCON//NOFORN
2.3.3 Rule-based Evaluation
Rules are descriptions of the conditions on the target required for successful
operation of a payload or persistence module. A rule is the combination of facts
usingboolean operators to create complex expressions.
The combinations of payload and persistence module are evaluated using rules
associated with each payload and module. Both the payload and persistence
module rule must evaluate to True for the decision engine to approve the
combination. Payloads may override their default rules when combined with a
specific persistence module.
Grasshopper supports the following boolean operators:
True if ... False if ... Invalid if ...
and
all arguments True any arguments
False
No False and any
arguments Invalid
or
any arguments True all arguments False No True and any
arguments Invalid
xor
one argument True zero, more than one
True
any arguments
Invalid
not
argument False argument True argument Invalid
assume_true
argument
TrueorInvalid
argument False
assume_false
argument True argument False
orInvalid
22
SECRET//ORCON//NOFORN