Coordinate ransomware response phases using the PICERL framework.
npx skills add https://github.com/dandye/ai-runbooks --skill respond-ransomware
Please help me install this Agent Skill. Skill: respond-ransomware Source: https://github.com/dandye/ai-runbooks/tree/main/skills/respond-ransomware Command: npx skills add https://github.com/dandye/ai-runbooks --skill respond-ransomware
Ransomware incidents require a structured, end-to-end response that coordinates detection, containment, eradication, and recovery across multiple tools and teams. This skill provides a PICERL-based playbook to guide analysts through rapid containment and thorough remediation, minimizing downtime and data loss.
Initiate the ransomware response workflow by supplying CASE_ID and INITIAL_INDICATORS to trigger identification, containment, eradication, and recovery steps.
High-intent search queries and answers about installing and using this skill.
Trigger ransomware response workflows by supplying a CASE_ID and INITIAL_INDICATORS. The workflow then executes identification, containment, eradication, and recovery steps based on the PICERL framework to restore operations.
The workflow enforces case documentation and phase outputs to satisfy audit trail requirements. It interlocks with SIEM, SOAR, and GTI data to ensure all containment and eradication steps are thoroughly recorded for review.
The ransomware response workflow enforces case documentation and defined phase outputs. This satisfies audit trail requirements by recording all identification, containment, eradication, and recovery actions taken during the incident.
Use the ransomware response workflow when you need rapid containment and thorough remediation across multiple teams. It provides a structured, end-to-end response that coordinates detection and recovery actions during active incidents.
dandyeTriage security alerts to distinguish real threats from false positives.
SylphxAIEnforces MFA, session visibility, and step-up recovery verification for web and mobile accounts.
dandyeTriage malware hashes with GTI and SIEM enrichment for classification and containment.
webrix-aiGenerate incident response playbooks for AWS, GCP, and Azure security incidents.
