Skill guides · 2 min read
Breach pattern analysis
Analyze normalized breach evidence for cross-record patterns.
When to use it
Use this when you need to understand recurring patterns across authorized breach records for one subject. It is useful after individual exposure findings raise questions about repeated identifiers or overlapping records. The Skill searches authorized breach evidence and requests a pattern assessment.
Before you start
Available on Agency. Fill every required field. Example values below illustrate the form; replace them with your intended subject.
| Field | Required | What to enter |
|---|---|---|
| Subject | Required | Enter subject. |
Run the Skill
- In Skill library, find Breach pattern analysis and select Use template.
- Fill in the template fields using your subject’s details, then check the Preview.
- Select Insert into chat to load the prepared request into the investigation composer.
- Check the intended case and send the unchanged request to run this Skill. To change its inputs, return to the template and insert it again.
Subject: [email protected]Read the results
Read the supporting evidence for each proposed pattern. Separate a repeated field from a justified relationship, and note contradictory records and gaps. Record overlap may support an exposure hypothesis without showing who caused the breach or controlled an account. Credentials remain redacted. If few usable records are available, a limited assessment is more appropriate than a strong cross-record conclusion.