compare_baseline
Compare baseline acquisition tasks for a specific endpoint to analyze and identify differences in digital forensics data. Requires endpoint ID and two or more task IDs.
Instructions
Compare baseline acquisition tasks for a specific endpoint
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| endpointId | Yes | The endpoint ID to compare baselines for | |
| taskIds | Yes | Array of baseline task IDs to compare (minimum 2) |
Input Schema (JSON Schema)
{
"properties": {
"endpointId": {
"description": "The endpoint ID to compare baselines for",
"type": "string"
},
"taskIds": {
"description": "Array of baseline task IDs to compare (minimum 2)",
"items": {
"type": "string"
},
"type": "array"
}
},
"required": [
"endpointId",
"taskIds"
],
"type": "object"
}