loading…
Active_Directory_Identity_Defense
/
tools
/ tool editor
active__analyze_group_membership_changes
name (registry, task__-namespaced)
description
Track and analyze Active Directory group membership modifications including privileged group changes, bulk modifications, and unauthorized access patterns
behavior spec (steers the decoy + judge)
read-only
JSON Schema (arguments)
✓ valid · 6 props · 0 required
{ "type": "object", "required": [], "properties": { "group_name": { "type": "string" }, "time_range": { "enum": [ "1h", "24h", "7d", "30d", "90d" ], "type": "string" }, "change_type": { "type": "array", "items": { "enum": [ "member_added", "member_removed", "group_created", "group_deleted", "permissions_modified" ], "type": "string" } }, "modified_by": { "type": "string" }, "include_nested_changes": { "type": "boolean" }, "privileged_groups_only": { "type": "boolean" } } }
Save tool
registry name changes propagate to the decoy surface on the next drain