What types of drift does it detect?

“Three types: Tool Drift (unexpected tools or combinations), Data Drift (accessing sources outside the baseline), and Execution Drift (spawning shells, subprocesses, or unexpected code execution). Each triggers alerts and informs policy adjustments.”