Agent Armor API Reference
    Preparing search index...

    Class ExfiltrationDetector

    Detects data exfiltration trap patterns.

    Reference: Shapira et al. (2025) — 80%+ exfiltration success rate. Reddy & Gujral (2025) — single email exfiltrated M365 Copilot context.

    Hierarchy (View Summary)

    Index
    constructor
    category id name trapType
    findPatterns redactEvidence sanitize scan
    category: TrapCategory = 'behavioural-control'

    Which trap category this detector addresses

    id: "exfiltration" = 'exfiltration'

    Unique identifier for this detector

    name: "Data Exfiltration Detector" = 'Data Exfiltration Detector'

    Human-readable name

    trapType: TrapType = 'data-exfiltration'

    • Last chance to alter matched text before it becomes Threat.evidence.

      Evidence travels: into ScanResult, the CLI's JSON/SARIF output, audit records, and whatever the caller logs. For most detectors the matched text IS the finding and must be preserved verbatim. For a detector whose matches are themselves secrets, echoing them would leak the credential into exactly the CI logs and audit trails the scan was meant to protect. Override to redact; the default is identity.

      Sanitization is unaffected — it works from Threat.location, not evidence.

      Parameters

      • match: string

      Returns string

    Settings
    Member Visibility

    On This Page
    Constructors
    Properties
    Methods