New to Claude Skills? Learn how to install them →

Incident Response skills

Free agent skills tagged incident response, ready to install into any SKILL.md-compatible agent.

AWS CloudWatch Investigation

github

Streamline incident investigation with reusable patterns.

Developer Toolsintermediate37.7k repo

Implementing Velociraptor for IR Collection

mukul975

Streamline endpoint forensic artifact collection for incident response.

Security & ComplianceintermediatePython · Shell27.6k repo

CISO Advisor

alirezarezvani

Transform security from a cost center to a business enabler.

Security & ComplianceintermediatePython · Shell24.3k repo
I

Implementing SOAR Playbook with Palo Alto XSOAR

mukul975

Automate incident response with Cortex XSOAR playbooks.

Security & ComplianceintermediatePython27.6k repo

Security & Compliance Expert

davila7

Streamline your security architecture and compliance efforts.

Security & ComplianceintermediatePython30.2k repo

Conducting Post-Incident Lessons Learned

mukul975

Structured reviews to enhance incident response effectiveness.

Security & ComplianceintermediatePython · Shell27.6k repo

Building Super Timelines with Plaso

mukul975

Create detailed forensic timelines for investigations.

Security & ComplianceintermediatePython · Shell27.6k repo

Eradicating Malware from Infected Systems

mukul975

Systematically remove malware and restore clean states.

Security & ComplianceadvancedPython · Shell27.6k repo

Collecting Volatile Evidence

mukul975

Capture critical data from compromised hosts before it's lost.

Security & ComplianceintermediatePython · Shell27.6k repo

Building Incident Response Dashboard

mukul975

Create real-time dashboards for incident response coordination.

Security & ComplianceintermediatePython27.6k repo

Implementing Ransomware Backup Strategy

mukul975

Create a resilient backup strategy against ransomware attacks.

Security & ComplianceintermediatePython · Shell27.6k repo

Incident Response

anthropics

Streamline your incident management process.

Security & Complianceintermediate23.4k repo

Legal Team Briefing

anthropics

Generate contextual briefings for legal workflows.

Productivityintermediate23.4k repo

Detecting Ransomware Precursors

mukul975

Identify early-stage ransomware indicators in network traffic.

Security & ComplianceintermediatePython · Shell27.6k repo

Bumblebee Security Scan

sickn33

Detect compromised packages on macOS/Linux.

Security & ComplianceintermediatePython · Shell44.7k repo
I

Incident Runbook Templates

wshobson

Streamline your incident response with structured templates.

Security & ComplianceintermediateShell38.7k repo

SOAR Automation with Phantom

mukul975

Automate security workflows with Splunk SOAR.

Security & ComplianceintermediatePython27.6k repo

Investigating Ransomware Attack Artifacts

mukul975

Forensically analyze ransomware incidents and recover evidence.

Security & ComplianceintermediatePython · Shell27.6k repo

Investigating Phishing Email Incident

mukul975

Streamline your phishing email investigations with SOC tools.

Security & ComplianceintermediatePython27.6k repo

OT Incident Response Playbook

mukul975

Streamline your OT incident response with tailored playbooks.

Security & ComplianceadvancedPython27.6k repo

Building SOC Playbook for Ransomware

mukul975

Create structured incident response playbooks for ransomware.

Security & ComplianceintermediatePython · Shell27.6k repo

Analyzing Memory Dumps

mukul975

Forensically analyze RAM dumps with Volatility.

Security & ComplianceintermediatePython · Shell27.6k repo

Incident Response

alirezarezvani

Manage and classify security incidents effectively.

Security & ComplianceintermediatePython · Shell24.3k repo

Detecting Compromised Cloud Credentials

mukul975

Identify and respond to cloud credential threats effectively.

Security & ComplianceintermediatePython · Shell27.6k repo