<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# Building Kill Chain Analysis — API Reference

## agent.js CLI

```bash
# Map action
node scripts/agent.js --action map

# Detect action
node scripts/agent.js --action detect

# Coverage action
node scripts/agent.js --action coverage

# Report action
node scripts/agent.js --action report
```

## Kill Chain Phase Schema

```json
{
  "phase": 3,
  "name": "Delivery",
  "description": "Transmit payload to target",
  "attack_activity": "Phishing email with malicious attachment",
  "defenses": ["Email filtering", "Web proxy", "WAF"]
}
```

## Coverage Analysis Output

```json
{
  "total_phases": 7,
  "covered": 2,
  "partial": 3,
  "gaps": 5,
  "left_of_boom": {"phases": 3, "coverage": "partial"},
  "right_of_boom": {"phases": 4, "coverage": "partial"}
}
```
