Add guardrails definitions to the docs

dissect/cobaltstrike/guardrails.py

@@ -2,15 +2,16 @@
 This module is responsible for finding and recovering Beacon Guardrails configuration from Cobalt Strike payloads.
 Guardrails is an additional layer of protection to the beacon config by using environmental keying (`T1480`_).
 
-Beacon Guardrails was introduced in Cobalt Strike 4.8:
+.. note::
+    Beacon Guardrails was introduced in Cobalt Strike 4.8:
 
- - https://www.cobaltstrike.com/blog/cobalt-strike-4-8-system-call-me-maybe
+    - https://www.cobaltstrike.com/blog/cobalt-strike-4-8-system-call-me-maybe
 
-Other research on Beacon Guardrails:
+    Other research on Beacon Guardrails:
 
- - https://itea.org/journals/volume-45-3/cobalt-strike-cyber-assessment-challenge/
+    - https://itea.org/journals/volume-45-3/cobalt-strike-cyber-assessment-challenge/
 
-.. _T1480: https://attack.mitre.org/techniques/T1480/
+    .. _T1480: https://attack.mitre.org/techniques/T1480/
 """
 
 from __future__ import annotations

docs/structures/guardrails_def.rst

@@ -0,0 +1,8 @@
+:attr:`dissect.cobaltstrike.guardrails.C_GUARDRAILS_DEF`
+----------------------------------------
+Structures for parsing Beacon Guardrails metadata.
+
+.. literalinclude:: ../../dissect/cobaltstrike/guardrails.py
+        :start-after: C_GUARDRAILS_DEF
+        :end-before: """
+        :language: c

docs/structures/index.rst

@@ -12,3 +12,4 @@ Structure definitions
    cs_def
    pe_def
    c2_def
+   guardrails_def