guardian_baseline
Records current system state (ports, processes, network, users) as a security baseline, then detects and reports drift against that baseline.
Instructions
Create or compare a security baseline snapshot. action='create' (default) records current state; action='compare' diffs against the most recent baseline and reports drift.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| action | No | create | |
| components | No | Components to baseline: ports, processes, network, users. |