senior-secops

Security triage is automated by running the log_triage.py Python script to summarize logs, surface actionable insights, and generate a concise incident response report for vulnerability and alert investigations.

Incident playbooks and post-incident hardening workflows are structured using the included incident worksheet reference, providing standardized guidance for containment, detection improvements, and remediation after security incidents.

Python 3 is required to run the log_triage.py utility for security log analysis and incident triage. The script processes log files to extract highlights and summarize data for actionable response insights.

Vulnerability triage and detection improvements are supported during active alerts and investigations. The skill provides containment guidance and workflows to enhance alerting mechanisms based on analyzed log data.

Log analysis works by executing the Python script on target log files, which then parses the data to summarize events and surface critical highlights needed to accelerate security triage and coordinate incident response.