loading…
Data_Access_Security
/
tools
/ tool editor
data__investigate_anomaly
name (registry, task__-namespaced)
description
Retrieve detailed analysis of access anomalies including user behavior baselines, risk factors, and recommended actions
behavior spec (steers the decoy + judge)
read-only - returns anomaly investigation report with behavioral analysis, timeline reconstruction, and risk assessment
JSON Schema (arguments)
✓ valid · 4 props · 1 required
{ "type": "object", "required": [ "anomaly_id" ], "properties": { "anomaly_id": { "type": "string" }, "analysis_depth": { "enum": [ "summary", "detailed", "forensic" ], "type": "string", "default": "detailed" }, "include_user_baseline": { "type": "boolean", "default": true }, "include_peer_comparison": { "type": "boolean", "default": true } } }
Save tool
registry name changes propagate to the decoy surface on the next drain