loading…
Securityteam_SOC
/
tools
/ tool editor
securityteam__list_active_incidents
name (registry, task__-namespaced)
description
List all active security incidents with filtering by priority, assignee, and incident type
behavior spec (steers the decoy + judge)
read-only
variant surfaces (generated)
snake·terse:
securityteam_list_active_incidents
camel·verbose:
securityteamListActiveIncidents
dotted·terse:
securityteam.list_active_incidents
verbfirst·verbose:
ListActiveIncidents
JSON Schema (arguments)
✓ valid · 5 props · 0 required
{ "type": "object", "required": [], "properties": { "status": { "enum": [ "new", "investigating", "containment", "eradication", "recovery", "closed" ], "type": "string" }, "priority": { "enum": [ "p1", "p2", "p3", "p4" ], "type": "string" }, "assignee_id": { "type": "string" }, "created_after": { "type": "string", "format": "date-time" }, "incident_type": { "enum": [ "malware", "phishing", "data_breach", "insider_threat", "ddos", "unauthorized_access" ], "type": "string" } } }
Save tool
registry name changes propagate to the decoy surface on the next drain