incident-response
alirezarezvani628 installs
Turn security alerts into a response plan.
What it does
Guides security incident triage, severity classification, escalation, and forensic evidence collection.
When to use it
Use when a detected or declared security incident needs classification, triage, escalation routing, or forensic evidence collection.
How to use it
Give it a security event as JSON; it returns a triage report with classification, severity, escalation routing, and forensic context.
What you provide
- Your files
Good to know
- cannot be undone: SOC Lead; CISO; Supervisory Authority (DPA); Affected data subjects; acquiring bank; National CSIRT or competent authority
Latest review
What you need · 1
Requires Python 3 to run the bundled incident triage script.
Access · 7
This skill
SOC Lead
Write
Pages the SOC Lead (irreversible)
CISO
Write
Pages the CISO (irreversible)
Supervisory Authority (DPA)
Write
Notifies the data protection authority (irreversible)