Structure evidence and construct chronological timelines for incident response triage.
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill blue-ir
Please help me install this Agent Skill. Skill: blue-ir Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/blue-ir Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill blue-ir
This skill addresses the chaos of security incident response by providing a structured, evidence-based framework to triage alerts, build accurate timelines, and coordinate containment decisions without manual overhead.
Use the blue-ir skill to analyze the provided incident ticket and build a preliminary timeline of events based on the attached log extracts.
High-intent search queries and answers about installing and using this skill.
To build an incident response timeline, the skill automatically organizes pre-collected logs and redacted artifacts into a chronological, verified sequence of events. This structures your evidence and clarifies the progression of a security incident without manual overhead.
Assessing the scope of a security compromise involves systematically identifying the blast radius, including affected systems, compromised accounts, and data exposure levels. This skill evaluates these factors to determine the full extent of an incident.
To get guidance on containment decisions during incident triage, the skill provides structured, risk-aware recommendations for actions like network isolation or credential rotation. It ensures operational impact is assessed before execution to support non-destructive incident management.
Incident response triage operates strictly with pre-collected, redacted artifacts. It requires this prepared evidence to construct timelines and guide forensic preservation, ensuring safe handling of security data within defensive workflows.
You need authorization gates for incident response to ensure strict adherence to policy validation. This guarantees safe, non-destructive incident management by enforcing containment decisions and forensic preservation only after proper approval.
daemon-blockint-techGuide alert triage, investigation, and containment planning for SOC operations.
zenobi-usCoordinate incident response for security breaches and operational incidents.
ryanmatDiagnose LogicMonitor alerts and execute Ansible playbooks for remediation.
maruakshayAssess multimodal systems for OCR prompt injection and vision-language vulnerabilities.
