<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Implementing Ransomware Communication Protocols — API Reference

## GPG Encrypted Communication

```bash
# Generate IR team key pair
gpg --full-generate-key --expert

# Encrypt message for IR team
echo "Incident details..." | gpg --encrypt --armor --recipient ir-team@company.com

# Decrypt received message
gpg --decrypt message.asc

# Import team member public key
gpg --import teammate-pubkey.asc
```

## Signal CLI for Secure Messaging

```bash
# Register Signal number
signal-cli -u +1XXXXXXXXXX register

# Send secure message
signal-cli -u +1XXXXXXXXXX send -m "IR update: containment complete" +1YYYYYYYYYY

# Send to group
signal-cli -u +1XXXXXXXXXX send -g GROUP_ID -m "Briefing in 15 min"
```

## Report Generation with pandoc

```bash
# Generate PDF incident report
pandoc incident_report.md -o incident_report.pdf \
  --template=ir_template.tex --pdf-engine=xelatex

# Generate HTML briefing
pandoc briefing.md -o briefing.html --standalone --css=ir_style.css
```

## Key Parameters

| Parameter | Description | Example |
|-----------|-------------|---------|
| `incident_time` | ISO 8601 incident timestamp | `2026-01-15T14:30:00Z` |
| `template_type` | Communication template | `internal_notification` |
| `deadline_hours` | Regulatory deadline | `72` (GDPR) |
| `audience` | Target notification group | `executive`, `regulatory` |
