skills.rest
FunnyWolf
FunnyWolfCOMMUNITY
Explore all skills by this author →
GitHub

asp-alert-zh

Review ASP alerts by ID and update AI analysis fields.

1.1k|201|Updated Sep 7, 2025
Search Tags:#investigation#triage#enrichment#mcp-server#ai-analysis#asp#alert-management
One-click install
npx skills add https://github.com/FunnyWolf/agentic-soc-platform --skill asp-alert-zh
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: asp-alert-zh
Source: https://github.com/FunnyWolf/agentic-soc-platform/tree/main/PLUGINS/ClaudeCode/skills/asp-alert-zh
Command: npx skills add https://github.com/FunnyWolf/agentic-soc-platform --skill asp-alert-zh

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps SOC teams audit ASP alerts, update AI analysis fields, view alert discussions, and attach enrichment to alerts, enabling faster triage and informed decision-making.

Core Features & Use Cases

  • Review an alert by ID to surface AI analysis and discussion history.
  • Update AI fields such as AI severity, AI confidence, or AI comments directly on an alert.
  • Attach enrichment to an alert to provide contextual information for investigations.
  • View and summarize alert discussions to support coordinated triage.

Quick Start

Review alert <alert_id> to update AI fields and attach enrichment.

Frequently Asked Questions about asp-alert-zh

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I triage ASP alerts and update AI analysis fields?▼

To triage ASP alerts, review the alert by ID to surface AI analysis and discussion history, then update AI fields such as AI severity, AI confidence, or AI comments directly on the alert.

Can I attach enrichment data to an alert during investigation?▼

Yes, you can attach enrichment to an alert to provide contextual information for investigations, supporting faster triage and informed decision-making within ASP MCP server environments.

Do I need an ASP MCP server to review alert discussions?▼

Yes, accessing an ASP MCP server is required to review alert discussions, list alerts, and update field-level changes for AI analysis workflows.

What is the best way to view and summarize alert discussions for coordinated triage?▼

Viewing and summarizing alert discussions through the alert ID review process supports coordinated triage by surfacing the discussion history and existing AI analysis fields.

Can I update AI severity and AI confidence on a single alert?▼

Yes, the update alert operation supports field-level changes, allowing you to directly modify AI severity, AI confidence, and AI comments on a single alert.

Does this support batch alert triage or only single-alert review?▼

This applies to single-alert triage, discussion review, and enrichment attachment workflows, focusing on reviewing an alert ID and updating its specific AI analysis fields.

Related Skills

Explore More Data & Analytics Skills→
FunnyWolfFunnyWolf
1.1k

asp-alert-en

Review ASP alerts, update AI triage fields, and attach artifacts.

Community
Intermediate
lloydchanglloydchang
2

incident-triage-automator

Aggregate alerts from monitoring systems and compute incident severity.

Community
Advanced
msandbumsandbu
2

ioc-investigation

Investigate IP addresses, domains, URLs, and file hashes with threat intelligence correlation.

Community
Advanced
menoncellomenoncello
3

deep-research

Automate multi-source research and generate structured business intelligence reports.

Community
Intermediate