Need Advice on Developing an Executable Sandbox for Behavior Monitoring

Hey everyone,

I’m working on a project to create a sandbox that can run files in a contained environment and monitor behaviors like file modifications, network calls, and memory access. The idea is to capture these behaviors and save them in a "blueprint" data structure for later analysis.

Here’s what I’m trying to achieve:

1. Run files safely within a sandbox to keep the host system secure.

2. Track file, network, and memory behaviors.

3. Save the observed behaviors in a compact data structure, acting as a fingerprint for each process.

Main challenges:

- How to ensure containment so the executable doesn’t affect the host system.

- How to structure the blueprint data in a way that’s both detailed and efficient.

- Choosing between Go or C++ for a low-level, efficient approach.

If you’ve worked on something similar or have any resources or tips, I’d love to hear from you! Thanks!