loading…
DLP_Data_Exfiltration_Response
/
tools
/ tool editor
dlp__search_content_matches
name (registry, task__-namespaced)
description
Search for content matches across endpoints and network traffic using data identifiers, regex patterns, or fingerprints to identify sensitive data exposure.
behavior spec (steers the decoy + judge)
read-only - returns content matches with context and confidence scores
JSON Schema (arguments)
✓ valid · 6 props · 0 required
{ "type": "object", "required": [], "properties": { "pattern": { "type": "string" }, "location": { "enum": [ "endpoint", "network", "email", "web", "cloud" ], "type": "string" }, "time_range": { "enum": [ "last_hour", "last_24h", "last_7d", "last_30d" ], "type": "string" }, "fingerprint_id": { "type": "string" }, "data_identifier": { "enum": [ "ssn", "ccn", "phi", "pii", "custom" ], "type": "string" }, "confidence_threshold": { "type": "number", "maximum": 1, "minimum": 0 } } }
Save tool
registry name changes propagate to the decoy surface on the next drain