security-investigation
CommunityDrive in-depth security investigations with correlated evidence.
Software Engineering#security analysis#timeline reconstruction#forensics#security investigation#data correlation
Authorjassics
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill enables in-depth security investigations, turning multiple data sources into a coherent timeline and analysis.
Core Features & Use Cases
- Hypothesis-Driven Analysis: Start from a lead or hypothesis and correlate evidence across sources to reach a conclusion.
- Cross-Source Correlation: Aggregate and correlate data from EDR, auth, network, and app logs.
- Intel Enrichment: Add threat intelligence and user/asset context to findings.
- Timeline Reconstruction: Create a chronological narrative of events for accurate analysis.
- Scope and Impact Analysis: Assess the full impact and lateral movement within the environment.
- Verdict and Reporting: Reach a definitive conclusion and produce a detailed report with actionable recommendations.
Quick Start
/security-investigation: investigate the security breach of "CompanyX" using evidence from multiple sources and intel.
Dependency Matrix
Required Modules
None requiredComponents
scriptsreferencesassets
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: security-investigation Download link: https://github.com/jassics/awesome-claude-security/archive/main.zip#security-investigation Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 620,000+ vetted skills library on demand.