Build a response plan for security incidents.
Creates security-incident playbooks and example code for tracking incidents, coordinating responses, and documenting recovery.
When to use it
Use when handling security incidents, creating response playbooks, or conducting forensic analysis.
Give it a security incident-response task; it supplies response procedures and example code for an incident-response implementation.
The Node.js example reads a Slack webhook URL from the environment to enable incident notifications; it skips notifications when the variable is absent.
This skill
Slack
Posts incident alerts to Slack (irreversible)
https://siem.example.com/api/incidents
Sends incident data to SIEM