skills.rest
FunnyWolf
FunnyWolfCOMMUNITY
Explore all skills by this author →
GitHub

asp-artifact-en

Find, create, attach, and enrich artifacts via the ASP MCP server.

1.1k|201|Updated Sep 7, 2025
Search Tags:#investigation#alerts#artifact#enrichment#pivot#ioc#asp
One-click install
npx skills add https://github.com/FunnyWolf/agentic-soc-platform --skill asp-artifact-en
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: asp-artifact-en
Source: https://github.com/FunnyWolf/agentic-soc-platform/tree/main/PLUGINS/ClaudeCode/skills/asp-artifact-en
Command: npx skills add https://github.com/FunnyWolf/agentic-soc-platform --skill asp-artifact-en

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill enables investigators to locate artifacts quickly, create new artifact records, attach artifacts to alerts, and persist enrichments on artifacts within the ASP platform.

Core Features & Use Cases

  • Artifact lookup by value, type, or IOC; create new artifact records; attach artifacts to alerts; and save structured analysis as enrichment.
  • Pivot on artifacts to drive investigations, cross-link alerts, enrich contextual data for future investigations, and support artifact-centric workflows.
  • Use cases include finding artifacts related to IOC indicators, linking artifacts to alerts, and enriching artifacts with analysis results.

Quick Start

List artifacts by value or criteria, create a new artifact, or attach artifacts to alerts as needed.

Frequently Asked Questions about asp-artifact-en

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find artifacts using an IOC value during a security investigation?▼

Find artifacts during a security investigation by searching directly with an IOC value, type, or criteria. The Skill queries the ASP server to locate matching artifact records for your investigation workflow.

What is artifact-centric investigation and how does pivoting work?▼

Artifact-centric investigation focuses on artifacts as the central pivot point to drive inquiries and cross-link alerts. Pivoting works by locating an artifact and using it to connect related alerts and enrich contextual data.

How do I create a new artifact record and attach it to an alert?▼

Create a new artifact record and attach it to an alert by issuing creation and attachment commands through the ASP MCP server. This links relevant artifacts directly to your active alerts for consolidated tracking.

Can I save structured analysis results as enrichment on existing artifacts?▼

Yes, you can save structured analysis results as enrichment on existing artifacts. This persists your contextual analysis data directly onto the artifact record for future investigations within the ASP platform.

Does this artifact investigation tool work with an ASP MCP server?▼

Yes, this artifact investigation tool works directly with an MCP-enabled ASP server. It implements server integration to support artifact creation, listing, attachment, and enrichment steps within your workflows.

What are the limitations when enriching artifacts in ASP workflows?▼

A key limitation for enriching artifacts is that the Skill applies guardrails to ensure concise responses, meaning output verbosity is intentionally restricted. It operates solely within the ASP MCP server environment without external dependencies.

Related Skills

Explore More Data & Analytics Skills→
FunnyWolfFunnyWolf
1.1k

asp-alert-zh

Review ASP alerts by ID and update AI analysis fields.

Community
Intermediate
FunnyWolfFunnyWolf
1.1k

asp-enrichment-zh

Attach structured analysis enrichments to cases, alerts, or artifacts.

Community
Intermediate
FunnyWolfFunnyWolf
1.1k

asp-alert-en

Review ASP alerts, update AI triage fields, and attach artifacts.

Community
Intermediate
dandyedandye
120

deep-dive-ioc

Aggregate GTI reports, SIEM findings, and related entities for a single IOC.

Community
Advanced