bb-edr: Triage Skill

What problem does it solve?

This Skill helps streamline the process of converting clawdstrike audit logs into comprehensive incident reports and concise response plans, enabling quick analysis and response to security incidents.

Core Features & Use Cases

• Audit Log Analysis: Summarize the last 50 audit events from the clawdstrike audit log.
• Incident Reporting: Generate a report detailing the timeline, impact assessment, and recommended response.
• Policy Checking: Ensure that any proposed response actions are in line with the active security policy.
• Output: Produces a Markdown report file named 'incident.md' with the final report.

Quick Start

Run the bb-edr: Triage Skill to generate an incident report from the audit logs.