skills.rest
FunnyWolf
FunnyWolfCOMMUNITY
Explore all skills by this author →
GitHub

asp-alert-en

Review ASP alerts, update AI triage fields, and attach artifacts.

1.1k|201|Updated Sep 7, 2025
Search Tags:#investigation#triage#artifact#enrichment#alert#asp
One-click install
npx skills add https://github.com/FunnyWolf/agentic-soc-platform --skill asp-alert-en
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: asp-alert-en
Source: https://github.com/FunnyWolf/agentic-soc-platform/tree/main/PLUGINS/ClaudeCode/skills/asp-alert-en
Command: npx skills add https://github.com/FunnyWolf/agentic-soc-platform --skill asp-alert-en

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

ASP alert triage can be time-consuming and inconsistent. This Skill provides a guided workflow to review alerts, update AI triage fields, attach artifacts, access discussions, and apply enrichments, ensuring faster and more reliable incident context.

Core Features & Use Cases

  • AI-assisted triage: quickly summarize alerts and adjust AI-based severity, confidence, or comments.
  • Artifact & enrichment workflows: create or attach artifacts and attach enrichment to alerts or discussions.
  • Contextual investigations: view analyst discussions and related references to inform decisions.
  • SOP-driven actions: follow the defined decision flow and operating rules to maintain consistency.

Quick Start

Review alert <alert_id> and attach enrichment to the alert.

Frequently Asked Questions about asp-alert-en

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I streamline ASP alert triage and update AI triage fields?▼

Streamline ASP alert triage by using a guided workflow to review alerts, update AI-based severity and confidence fields, and attach artifacts for faster incident context.

How do I attach artifacts and enrichments to ASP alerts?▼

Attach artifacts and enrichments to ASP alerts through a guided workflow that creates or links artifacts and applies enrichment data directly to alerts or related analyst discussions.

Can I review multiple ASP alerts at once during an investigation?▼

Multi-alert investigations are supported by the triage workflow, allowing you to review multiple ASP alerts, apply SOP-driven decision rules, and access discussions to inform decisions.

What is the best way to maintain consistency during ASP alert triage?▼

Maintain ASP alert triage consistency by following SOP-driven decision rules and operating procedures that guide artifact attachment, enrichment workflows, and analyst discussions.

Does ASP alert triage work with single-alert reviews?▼

Single-alert reviews are fully supported, enabling you to review an individual ASP alert, update AI triage fields, and attach relevant enrichments to build incident context.

Related Skills

Explore More Data & Analytics Skills→
FunnyWolfFunnyWolf
1.1k

asp-alert-zh

Review ASP alerts by ID and update AI analysis fields.

Community
Intermediate
FunnyWolfFunnyWolf
1.1k

asp-artifact-en

Find, create, attach, and enrich artifacts via the ASP MCP server.

Community
Intermediate
dandyedandye
120

deep-dive-ioc

Aggregate GTI reports, SIEM findings, and related entities for a single IOC.

Community
Advanced
FunnyWolfFunnyWolf
1.1k

asp-case-zh

List, review, and update ASP security cases via MCP server operations.

Community
Advanced