loading…
Wazuh_investigation
/
tools
/ tool editor
wazuh__hunt_file_integrity
name (registry, task__-namespaced)
description
Hunt for file integrity monitoring events across specified paths and file operations
behavior spec (steers the decoy + judge)
read-only
JSON Schema (arguments)
✓ valid · 6 props · 1 required
{ "type": "object", "required": [ "file_path" ], "properties": { "agent_id": { "type": "string" }, "file_path": { "type": "string" }, "operation": { "enum": [ "added", "modified", "deleted", "all" ], "type": "string", "default": "all" }, "recursive": { "type": "boolean", "default": false }, "time_range": { "enum": [ "last_hour", "last_24h", "last_7d", "last_30d" ], "type": "string" }, "checksum_changed": { "type": "boolean" } } }
Save tool
registry name changes propagate to the decoy surface on the next drain