<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Triaging Security Incident

## Agent Script

| Command | Description |
|---|---|
| `node agent.js analyze --target <t>` | Analyze a target for triaging-security-incident indicators |
| `node agent.js scan --scope <s> [--depth N]` | Scan a scope for relevant data |
| `node agent.js report --format json\|text\|csv` | Generate a summary report |

## Options

| Flag | Type | Default | Description |
|---|---|---|---|
| `--target` | str | *(required)* | Target identifier for analysis |
| `--scope` | str | *(required)* | Scan scope definition |
| `--depth` | int | 3 | Scan recursion depth |
| `--format` | str | json | Output format |
| `--verbose` | flag | false | Enable verbose output |

## Output Format

All commands return JSON:

```json
{
  "action": "<command>",
  "technique": "triaging-security-incident",
  "domain": "incident-response",
  ...
}
```

## Examples

```bash
# Analyze a target
node scripts/agent.js analyze --target 192.168.1.0/24

# Deep scan
node scripts/agent.js scan --scope internal --depth 5

# Generate report
node scripts/agent.js report --format text
```
