asp-case-en

Review, list, and update ASP cases with filters and AI analysis fields.

1.1k|201|Updated Sep 7, 2025
One-click install
npx skills add https://github.com/FunnyWolf/agentic-soc-platform --skill asp-case-en
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: asp-case-en
Source: https://github.com/FunnyWolf/agentic-soc-platform/tree/main/PLUGINS/ClaudeCode/skills/asp-case-en
Command: npx skills add https://github.com/FunnyWolf/agentic-soc-platform --skill asp-case-en

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manage ASP security cases efficiently by enabling review, listing, and updates across case workflows and AI analysis fields.

Core Features & Use Cases

  • Review a specific case and surface its context for quick triage.
  • List cases with filters to track status, severity, and progress.
  • Inspect case discussions and check related alerts or playbook runs to inform decisions.
  • Update case workflow fields and AI analysis results to drive automation and collaboration.

Quick Start

Review a case by giving the case_id, for example: review case 12345.

Frequently Asked Questions about asp-case-en

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review and triage security cases in a SOC environment?

To triage security cases, you can review a specific case by providing its case_id to surface context, inspect discussions, and view related alerts or playbook runs for quick decision-making.

What is the best way to list and filter active security cases?

Listing active security cases is done using filters to track case status, severity, and progress, helping SOC operators manage and monitor ongoing investigations effectively.

Can I update case workflow and AI analysis fields directly?

Yes, you can update case workflow fields and AI analysis results directly to drive automation and collaboration across your security investigation processes.

Do I need an MCP ASP server connection to manage security cases?

Yes, an MCP ASP server connection is required to manage security cases, as the system uses frontmatter-defined metadata for discovery and enforces structured, rule-based guidance for case operations.

How do I inspect playbook runs and alerts related to a specific case?

You inspect related playbook runs and alerts by reviewing the specific case, which surfaces all associated context and related security events to support your triage process.