Reference

Precise technical details for configuration syntax and other lookup material.

Reference	Description
Configuration	INI file format, section keys, and discovery rules
Rule Engine Spec	Rule file format, 26 helpers, evaluation model, audit, policy parameters
Investigation Context Schema	JSON schema for cross-tool investigation properties, Grouping envelope, error cases

---

Diataxis note: Reference docs are information-oriented — they describe things exactly as they are. For step-by-step instructions, see the How-to guides.

---

Licensed under the Apache License, Version 2.0