{
  "report_info": {
    "version": "9.0.1",
    "generated_at": "2026-06-23T09:48:39Z",
    "binary_name": "kodachi-soc"
  },
  "binary": {
    "name": "kodachi-soc",
    "path": "/opt/kodachi/dashboard/hooks/kodachi-soc",
    "timestamp": "2026-06-23T09:48:39Z",
    "file_info": {
      "size": 3675776,
      "sha256": "7a36622bad99c476073b2c5e441bafffaa4d791737438a6b382afdd60a7ea27a"
    },
    "flag_n": {
      "command": "info",
      "data": {
        "author": "Warith Al Maawali",
        "copyright": "© 2026 Linux Kodachi",
        "description": "Kodachi SOC host-security monitor — full telemetry collector with MITRE ATT&CK annotations",
        "features": [
          "16 SOC collectors: vitals, network, connections, processes, threats, auth, privacy, system",
          "FIM (SHA-256), SUID drift, ld.so.preload, kernel taint, capability audit",
          "Background refresh with lock-file dedup",
          "Dashboard DATA JSON: host/generated/overall/counts/load/score/findings/posture/clusters",
          "MITRE ATT&CK annotations on all threat collectors"
        ],
        "license": "Proprietary",
        "name": "kodachi-soc",
        "securityFeatures": {
          "authentication": "Not provided by cli-core (see online-auth)",
          "encryption": "Not provided by cli-core",
          "inputValidation": "Argument parsing via clap; per-command validation is the consumer's responsibility",
          "rateLimiting": "Not provided by cli-core"
        },
        "systemRequirements": {
          "dependencies": [
            "OpenSSL",
            "libcurl"
          ],
          "os": "Linux (Debian-based)",
          "privileges": "root/sudo for system operations"
        },
        "version": "9.0.1",
        "website": "https://www.digi77.com"
      },
      "errors": [],
      "metadata": {
        "executionTime": 8,
        "hostname": "REDACTED-BUILD-HOST",
        "user": "REDACTED-BUILD-USER"
      },
      "status": "success",
      "timestamp": "2026-06-23T09:48:39.625326506Z",
      "version": "9.0.1",
      "warnings": []
    },
    "flag_v": {
      "command": "version",
      "data": {
        "buildDate": "REDACTED-BUILD-TIME",
        "gitCommit": "unknown",
        "name": "kodachi-soc",
        "rustVersion": "1.82.0",
        "version": "9.0.1"
      },
      "errors": [],
      "metadata": {
        "executionTime": 7,
        "hostname": "REDACTED-BUILD-HOST",
        "user": "REDACTED-BUILD-USER"
      },
      "status": "success",
      "timestamp": "2026-06-23T09:48:39.700934933Z",
      "version": "9.0.1",
      "warnings": []
    },
    "flag_h": {
      "command": "help",
      "data": {
        "commandCategories": [
          {
            "category": "Commands",
            "commands": [
              {
                "description": "Collect all SOC telemetry and emit DATA JSON",
                "examples": [
                  "sudo kodachi-soc snapshot",
                  "sudo kodachi-soc snapshot --json",
                  "sudo kodachi-soc snapshot --json-pretty",
                  "sudo kodachi-soc snapshot --json-human"
                ],
                "name": "snapshot",
                "options": [],
                "requires_sudo": true,
                "usage": "kodachi-soc snapshot [--json | --json-pretty | --json-human]"
              },
              {
                "description": "Run all expensive background scans and populate the cache",
                "examples": [
                  "sudo kodachi-soc refresh"
                ],
                "name": "refresh",
                "options": [],
                "requires_sudo": true,
                "usage": "kodachi-soc refresh"
              }
            ]
          }
        ],
        "description": "Kodachi SOC host-security monitor — full telemetry collector with MITRE ATT&CK annotations",
        "environmentVariables": [
          {
            "default": "info",
            "description": "Set logging level",
            "name": "RUST_LOG",
            "values": "error|warn|info|debug|trace"
          },
          {
            "default": "unset",
            "description": "Disable all colored output when set",
            "name": "NO_COLOR",
            "values": "1|true|yes (any value disables color)"
          }
        ],
        "exitCodes": {
          "0": "Success",
          "1": "General error",
          "2": "Invalid arguments",
          "3": "Permission denied",
          "4": "Network error",
          "5": "File not found"
        },
        "globalOptions": [
          {
            "description": "Print help information",
            "flag": "-h, --help"
          },
          {
            "description": "Print version information",
            "flag": "-v, --version"
          },
          {
            "description": "Display detailed information",
            "flag": "-n, --info"
          },
          {
            "description": "Show usage examples",
            "flag": "-e, --examples"
          },
          {
            "description": "Output in JSON format",
            "flag": "--json"
          },
          {
            "description": "Force output format (text|json)",
            "flag": "-o, --output-format <FORMAT>"
          },
          {
            "description": "Pretty-print JSON output with indentation",
            "flag": "--json-pretty"
          },
          {
            "description": "Enhanced JSON output with improved formatting (like jq)",
            "flag": "--json-human"
          },
          {
            "description": "Select specific fields to include in output (comma-separated)",
            "flag": "--fields <FIELD_LIST>"
          },
          {
            "description": "Limit number of results returned",
            "flag": "--limit <NUMBER>"
          },
          {
            "description": "Skip first N results (for pagination)",
            "flag": "--offset <NUMBER>"
          },
          {
            "description": "Working directory (defaults to auto-detected base directory)",
            "flag": "-d, --work-dir <PATH>"
          },
          {
            "description": "Set custom port number (1024-65535)",
            "flag": "--port <PORT>"
          },
          {
            "description": "Set log level (error|warn|info|debug)",
            "flag": "--log-level <LEVEL>"
          },
          {
            "description": "Enable verbose output",
            "flag": "--verbose"
          },
          {
            "description": "Suppress non-essential output",
            "flag": "--quiet"
          },
          {
            "description": "Disable colored output",
            "flag": "--no-color"
          },
          {
            "description": "Use custom configuration file",
            "flag": "--config <FILE>"
          },
          {
            "description": "Set operation timeout in seconds (optional; no default applied)",
            "flag": "--timeout <SECS>"
          },
          {
            "description": "Retry attempts (optional; no default applied)",
            "flag": "--retry <COUNT>"
          }
        ],
        "name": "kodachi-soc",
        "usage": "kodachi-soc [OPTIONS] [COMMAND] [ARGS]"
      },
      "errors": [],
      "metadata": {
        "executionTime": 7,
        "hostname": "REDACTED-BUILD-HOST",
        "user": "REDACTED-BUILD-USER"
      },
      "status": "success",
      "timestamp": "2026-06-23T09:48:39.776331413Z",
      "version": "9.0.1",
      "warnings": []
    },
    "flag_e": {
      "command": "examples",
      "data": {
        "categories": [
          {
            "description": "Common operations",
            "examples": [
              {
                "command": "sudo kodachi-soc",
                "description": "Default operation",
                "expectedOutput": "Shows help information"
              },
              {
                "command": "sudo kodachi-soc --json",
                "description": "JSON formatted output",
                "expectedOutput": "JSON response"
              }
            ],
            "id": "1_basic_usage",
            "title": "Basic Usage"
          }
        ],
        "description": "Usage examples for kodachi-soc",
        "name": "kodachi-soc",
        "quickReference": [
          "sudo kodachi-soc --help",
          "sudo kodachi-soc --version",
          "sudo kodachi-soc --info --json",
          "sudo kodachi-soc --examples --json"
        ]
      },
      "errors": [],
      "metadata": {
        "executionTime": 14,
        "hostname": "REDACTED-BUILD-HOST",
        "user": "REDACTED-BUILD-USER"
      },
      "status": "success",
      "timestamp": "2026-06-23T09:48:39.967027775Z",
      "version": "9.0.1",
      "warnings": []
    }
  }
}