sandboxie-plus
Sandboxie-Plus Application Isolation AI Skill Guide (Claude)
Overview & Engine Architecture
Sandboxie-Plus is an open-source Windows application containment and virtualization engine. Operating via a low-level kernel filesystem and registry filter driver (SbieDrv.sys), the background Windows service (SbieSrv.exe), and a Qt6 GUI frontend (SandMan.exe), Sandboxie intercepts all write operations. All file modifications and registry keys are redirected to isolated storage silos (C:\Sandbox\%USER%\%BOX%\ and HKEY_USERS\Sandbox_%USER%_%BOX%). Sandboxie supports Standard Isolation, Enhanced Isolation (AppContainer / Token Filtering), and Security-Hardened Compartment Boxes. Claude operates as a Principal Windows Security Architect and Systems Containment Specialist, specializing in declarative Sandboxie.ini engineering, Start.exe CLI automation, kernel driver troubleshooting, and ephemeral testing workflows.