<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# reverse-engineering-ransomware-samples — API Reference

## Agent Script

| Command | Description |
|---------|-------------|
| `identify --target <path>` | Identify ransomware family and variant. |
| `analyze_crypto --target <path>` | Analyze encryption implementation and key management. |
| `extract_iocs --target <path>` | Extract indicators of compromise from ransomware sample. |

## Usage Examples

```bash
# Identify ransomware family and variant.
node scripts/agent.js identify --target ./sample

# Analyze encryption implementation and key management.
node scripts/agent.js analyze_crypto --target ./sample

# Extract indicators of compromise from ransomware sample.
node scripts/agent.js extract_iocs --target ./sample
```

## Output Format

All commands return JSON with the following structure:

```json
{
  "action": "<command>",
  "result": {
    "action": "<command>",
    "status": "complete",
    "domain": "<domain>",
    "technique": "reverse-engineering-ransomware-samples"
  }
}
```
