Tool tree
A safe, human-led cyber investigation workspace for people and their agents.
Implementation
gradeNot graded
gradeNot graded
get_case_briefingAnswer
Read a concise briefing for the active synthetic cyber-investigation case, including risk, confidence, and current review state.
View tool JSON
{
"name": "get_case_briefing",
"kind": "answer",
"impl": "imperative",
"description": "Read a concise briefing for the active synthetic cyber-investigation case, including risk, confidence, and current review state.",
"inputSchema": {
"type": "object",
"properties": {},
"additionalProperties": false
}
}list_case_evidenceAnswer
List safe metadata for preserved synthetic evidence in the active case. This tool never opens or executes evidence.
View tool JSON
{
"name": "list_case_evidence",
"kind": "answer",
"impl": "imperative",
"description": "List safe metadata for preserved synthetic evidence in the active case. This tool never opens or executes evidence.",
"inputSchema": {
"type": "object",
"properties": {},
"additionalProperties": false
}
}list_prioritised_signalsAnswer
Read explainable, prioritised investigation signals and their supporting evidence references.
View tool JSON
{
"name": "list_prioritised_signals",
"kind": "answer",
"impl": "imperative",
"description": "Read explainable, prioritised investigation signals and their supporting evidence references.",
"inputSchema": {
"type": "object",
"properties": {
"minimumConfidence": {
"type": "number",
"minimum": 0,
"maximum": 100,
"description": "Optional minimum confidence percentage."
}
},
"additionalProperties": false
}
}draft_investigation_findingAction
Prepare a reviewable draft finding from recorded synthetic case facts. This does not approve or publish the finding.
View tool JSON
{
"name": "draft_investigation_finding",
"kind": "act",
"impl": "imperative",
"description": "Prepare a reviewable draft finding from recorded synthetic case facts. This does not approve or publish the finding.",
"inputSchema": {
"type": "object",
"properties": {},
"additionalProperties": false
}
}generate_incident_summaryAnswer
Read a structured incident summary reflecting the current visible case state and any recorded human approval.
View tool JSON
{
"name": "generate_incident_summary",
"kind": "answer",
"impl": "imperative",
"description": "Read a structured incident summary reflecting the current visible case state and any recorded human approval.",
"inputSchema": {
"type": "object",
"properties": {},
"additionalProperties": false
}
}