skills.rest
FunnyWolf
FunnyWolfCOMMUNITY
Explore all skills by this author →
GitHub

asp-enrichment-en

Create and attach enrichment records to cases, alerts, or artifacts on the ASP platform.

1.1k|201|Updated Sep 7, 2025
Search Tags:#context#investigation#artifact#enrichment#case#attachment#alert
One-click install
npx skills add https://github.com/FunnyWolf/agentic-soc-platform --skill asp-enrichment-en
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: asp-enrichment-en
Source: https://github.com/FunnyWolf/agentic-soc-platform/tree/main/PLUGINS/ClaudeCode/skills/asp-enrichment-en
Command: npx skills add https://github.com/FunnyWolf/agentic-soc-platform --skill asp-enrichment-en

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This capability helps security teams persist structured analysis by saving enrichment records and attaching them to cases, alerts, or artifacts, ensuring context is preserved across workflows.

Core Features & Use Cases

  • Create new enrichment records from analysis results using create_enrichment.
  • Attach enrichment records to a case, alert, or artifact with attach_enrichment_to_target.
  • Keeps enrichment payload compact and auditable for investigation workflows.

Quick Start

Provide target_type, target_id, and the enrichment payload, then run create_enrichment and attach_enrichment_to_target to attach it to the specified object.

Frequently Asked Questions about asp-enrichment-en

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I save enrichment results and attach them to a case or alert?▼

To save enrichment results, use create_enrichment to generate a record, then attach_enrichment_to_target to link it to a case, alert, or artifact using the target_type and target_id parameters.

What is enrichment data attachment in security investigation workflows?▼

Enrichment data attachment persists structured analysis context by creating enrichment records and linking them to investigation objects, ensuring analytical findings remain preserved across security case workflows.

Do I need a target_id to attach an artifact enrichment to an alert?▼

Yes, you need both target_type and target_id to attach an artifact enrichment to an alert, as these parameters identify the specific destination object for the enrichment record.

Does the enrichment payload get validated before attachment?▼

Yes, the enrichment payload is validated before execution to ensure compact and auditable structured analysis data is correctly formatted before attaching to the target object.

Can I attach enrichment records to multiple target types like cases, alerts, and artifacts?▼

Yes, you can attach enrichment records to cases, alerts, or artifacts by specifying the desired target_type and its corresponding target_id during the attach_enrichment_to_target workflow.

Related Skills

Explore More Data & Analytics Skills→
FunnyWolfFunnyWolf
1.1k

asp-enrichment-zh

Attach structured analysis enrichments to cases, alerts, or artifacts.

Community
Intermediate
patrykkopycinskipatrykkopycinski
6

security-case-management

Manage Elastic Security investigation cases and attach related alerts.

Community
Intermediate
FunnyWolfFunnyWolf
1.1k

asp-alert-zh

Review ASP alerts by ID and update AI analysis fields.

Community
Intermediate
yachelayachela

client-comms-log

Log client communications with case IDs and generate supervision pattern findings.

Community
Intermediate