The webshell contract and HTTP transport exist, but the source release documentation explicitly states that real Windows IIS execution has not been validated. Remote bundle execution, collection, artifact handling, and platform dispatch are still Linux-oriented in the current validated path.
Do not present ASPX/Windows webshell support as validated in customer-facing material until a real Windows IIS validation report is completed.
DSP release validation covers the execution pipeline:
Scenario activity can be dispatched.
Events are recorded or collected.
Event bundles reach the local Event Store.
Validation/reporting runs.
Evidence and manual verification templates are generated.
It does not automatically prove that a particular third-party security product fired an alert, assigned a specific severity, or correlated signals into a case.