<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Investigating IAM Compromise

## Tools

### IAM Investigation

| Command | Description |
|---|---|
| `aws iam list-access-keys` | Keys |
| `agent.js trace` | Trace |
| `agent.js escalation` | Escalation |
| `agent.js persistence` | Persistence |

### Agent Script

```bash
node agent.js trace --access-key <value>
node agent.js escalation --principal <value>
node agent.js persistence --account <value>
node agent.js report --investigation <value>
```
