skills.rest
Happy-Technologies-LLC
Happy-Technologies-LLCOFFICIAL
Explore all skills by this author →
WebsiteGitHub

metrics-analysis

Analyze ServiceNow security operations data to calculate MTTD, MTTR, and false-positive rates.

34|13|Updated Feb 6, 2026
Search Tags:#security#analytics#metrics#soc#servicenow#mttr#mttd
One-click install
npx skills add https://github.com/Happy-Technologies-LLC/happy-servicenow-skills --skill metrics-analysis-happy-technologies-llc
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: metrics-analysis
Source: https://github.com/Happy-Technologies-LLC/happy-servicenow-skills/tree/main/skills/secops/metrics-analysis
Command: npx skills add https://github.com/Happy-Technologies-LLC/happy-servicenow-skills --skill metrics-analysis-happy-technologies-llc

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps security operations teams quantify detection, response and workload performance by transforming raw ServiceNow data into actionable metrics and dashboards.

Core Features & Use Cases

  • Calculate Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) across incident populations.
  • Track incident volume trends by category, priority, and time period.
  • Measure false positive rates and analyze analyst workload distribution for capacity planning.
  • Generate metrics dashboards and periodic management reports to benchmark against baselines and targets.
  • Use Case: Produce a monthly SOC metrics report for executive leadership with trend insights and recommendations.

Quick Start

Load the metrics-analysis skill and run a 30-day SOC performance report against your ServiceNow data.

Frequently Asked Questions about metrics-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I calculate MTTD and MTTR metrics from ServiceNow SOC data?▼

You can generate a SOC metrics dashboard by analyzing incident volume trends, false-positive rates, and analyst workload distribution from ServiceNow data, producing periodic management reports with trend insights and capacity planning recommendations.

Does this metrics analysis skill require Performance Analytics to work with ServiceNow data?▼

This metrics analysis skill does not strictly require Performance Analytics, but it leverages Performance Analytics where available, reading ServiceNow incident, task, observable, and audit tables via REST and MCP tools to produce MTTD and MTTR outputs.

What is the best way to track false positive rates and analyst workload for SOC capacity planning?▼

To produce a monthly SOC performance report for executive leadership, run a 30-day analysis against your ServiceNow data to generate trend dashboards, benchmark against baselines, and provide actionable capacity planning insights.

Can I use REST and MCP tools to extract security operations metrics from ServiceNow audit tables?▼

This skill focuses on quantifying SOC metrics like MTTD, MTTR, and false-positive rates from ServiceNow data, contrasting with general data analytics approaches by providing specialized security operations trend dashboards and workload distribution analysis.

Related Skills

Explore More Data & Analytics Skills→
Happy-Technologies-LLCHappy-Technologies-LLC
34

post-incident-analysis

Reconstruct incident timelines and generate post-incident analysis reports from ServiceNow Security Operations records.

Official
Advanced
nateanatea

quality-metrics

Calculate and visualize software quality metrics for dashboards and CI/CD quality gates.

Community
Advanced
Happy-Technologies-LLCHappy-Technologies-LLC
34

executive-dashboard

Generate executive ITSM KPI dashboards from ServiceNow incident, change, and problem data.

Official
Advanced
zenobi-uszenobi-us
68

incident-responder

Coordinate incident response for security breaches and operational incidents.

Official
Advanced