skill tag
alert-triage▌
2 indexed skills · max 10 per page
skills (2)
performing-alert-triage-with-elastic-siem
mukul975/Anthropic-Cybersecurity-Skills · performing-alert-triage-with-elastic-siem
Perform systematic alert triage in Elastic Security SIEM to rapidly classify, prioritize, and investigate security alerts for SOC operations.
triaging-security-alerts-in-splunk
mukul975/Anthropic-Cybersecurity-Skills · triaging-security-alerts-in-splunk
Triages security alerts in Splunk Enterprise Security by classifying severity, investigating notable events, correlating related telemetry, and making escalation or closure decisions using SPL queries and the Incident Review dashboard. Use when SOC analysts face queued alerts from correlation searches, need to prioritize investigation order, or must document triage decisions for handoff to Tier 2/3 analysts.