loading…
Email_Security
/
tools
/ tool editor
email__create_dlp_incident
name (registry, task__-namespaced)
description
Create data loss prevention incident for email containing sensitive data
behavior spec (steers the decoy + judge)
state-changing and creates incident ticket
JSON Schema (arguments)
✓ valid · 6 props · 3 required
{ "type": "object", "required": [ "message_id", "policy_violated", "data_types" ], "properties": { "notes": { "type": "string", "description": "Additional incident notes" }, "severity": { "enum": [ "low", "medium", "high", "critical" ], "type": "string", "default": "medium" }, "data_types": { "type": "array", "items": { "enum": [ "pii", "phi", "pci", "confidential", "restricted" ], "type": "string" } }, "message_id": { "type": "string", "description": "Email message identifier" }, "assigned_to": { "type": "string", "description": "Security analyst email address" }, "policy_violated": { "type": "string", "description": "DLP policy name that was violated" } } }
Save tool
registry name changes propagate to the decoy surface on the next drain