Download

Skill UI

Browse and discover 6557+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Incident Investigation , found 25 results

Default Newest Most Downloaded

Distributed Error Analysis Expert

error-debugging-error-analysis

sickn33/antigravity-awesome-skills

Provides structured error investigation for distributed systems, handling incident logs, tracing, and observability to find root causes, suggest fixes, and strengthen reliability.

Incident Response Specialist

incident-responder

sickn33/antigravity-awesome-skills

Provides SRE-based incident response guidance, observability-driven investigation protocols, and structured communication/playbooks to stabilize outages, coordinate teams, and improve postincident reviews.

Obsidian Observability Toolkit

obsidian-observability

jeremylongshore/claude-code-plugins-plus-skills

Provides structured logging, performance metrics, error tracking, and a live debug panel for Obsidian plugins, complete with history buffers, timers, counters, and downloadable debug bundles to simplify monitoring and incident investigations.

Email Header Phishing Analysis

analyzing-email-headers-for-phishing-investigation

mukul975/Anthropic-Cybersecurity-Skills

Parse and validate email headers when investigating phishing incidents to trace delivery hops, confirm sender authenticity, and detect spoofing via SPF, DKIM, and DMARC checks during forensic response.

Network Traffic Incident Analysis

analyzing-network-traffic-for-incidents

mukul975/Anthropic-Cybersecurity-Skills

Analyzes PCAP, Zeek logs, and NetFlow captures to spot command-and-control beacons, lateral movement, and exfiltration during incidents, guiding packet-level validation and IOC extraction for SOC investigations.

Prefetch Execution Analysis Guide

analyzing-prefetch-files-for-execution-history

mukul975/Anthropic-Cybersecurity-Skills

Guide for parsing Windows Prefetch files to reconstruct program execution history, run counts, timestamps, and referenced assets for forensic investigations and incident timelines.

Splunk Security Log Analysis

analyzing-security-logs-with-splunk

mukul975/Anthropic-Cybersecurity-Skills

Uses Splunk Enterprise Security and SPL to correlate Windows, firewall, proxy, and authentication logs, reconstruct incident timelines, detect anomalies, and guide investigations and detection rule creation.

Windows Amcache Forensics

analyzing-windows-amcache-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Parses Windows Amcache.hve to surface program, installation, and driver metadata, correlates SHA-1 hashes with threat intelligence, and reconstructs timelines for incident response and malware investigations.

Timesketch Incident Timeline

building-incident-timeline-with-timesketch

mukul975/Anthropic-Cybersecurity-Skills

Build collaborative forensic incident timelines with Timesketch by ingesting multi-source logs, normalizing them into searchable sketches, and applying built-in analyzers to reconstruct attack chains during investigations.

SOC Escalation Matrix

building-soc-escalation-matrix

mukul975/Anthropic-Cybersecurity-Skills

Defines a structured SOC escalation matrix with severity tiers, response SLAs, and context-driven escalation paths so analysts can move incidents through triage, investigation, and management while keeping stakeholders informed.

Automating Phishing SOAR

implementing-soar-playbook-for-phishing

mukul975/Anthropic-Cybersecurity-Skills

Automates phishing incident response by parsing reported emails, creating Splunk SOAR containers and artifacts, triggering investigation playbooks, and polling REST API action results so external tools can orchestrate triage.

Velociraptor IR Collection

implementing-velociraptor-for-ir-collection

mukul975/Anthropic-Cybersecurity-Skills

Deploy and tune Velociraptor across Windows, Linux, and macOS to collect forensic artifacts via VQL, hunts, and artifact packs, enabling incident response teams to scale endpoint investigations with centralized control and minimal impact.

Language