Skill UI

This skill guides the implementation of Security Orchestration, Automation, and Response (SOAR) workflows using platforms like Splunk Phantom. It automates the entire incident lifecycle, including alert triage, IOC enrichment (via VirusTotal, CrowdStrike), containment actions, and ticket creation (ServiceNow). Ideal for SOC teams needing to reduce Mean Time To Respond (MTTR) and standardize complex security procedures across multiple tools.

A comprehensive guide detailing the systematic process of security alert triage within Elastic Security SIEM. Learn how to classify, prioritize, and investigate potential threats using Kibana, advanced ES|QL queries, and ECS-normalized data. This workflow is crucial for SOC analysts to rapidly determine true positives, manage alert queues, and ensure effective incident response.

A structured guide for SOC Tier 1 analysts to triage security alerts within Splunk Enterprise Security (ES). It provides a systematic workflow for classifying severity, investigating notable events, correlating evidence across diverse data sources (proxy, firewall, logs), and making clear disposition decisions (True Positive, False Positive) required for escalation or closure.

This expert system is designed to act as an Arch Linux specialist, diagnosing and resolving complex system issues using best practices for rolling-release distributions. It guides users through step-by-step triage plans, leveraging native tools like pacman, systemctl, and journalctl. It provides actionable, copy-paste-ready commands for remediation, verification, and cleanup, ensuring stable system recovery.

A comprehensive runbook for rapid incident response to Figma REST API failures. It guides users through quick triage (checking status, authentication, rate limits), decision-making based on error codes (403, 429, 500), applying immediate mitigation strategies (token rotation, fallback modes), and completing thorough postmortem documentation.

A comprehensive runbook for diagnosing and resolving outages, degradation, and rate-limiting issues when using the Claude API. It provides structured triage steps, decision trees, and mitigation strategies for P1 through P4 severity incidents, ensuring minimal downtime and stable API interaction.

A comprehensive runbook providing structured guidance for rapid incident response when encountering failures with the Canva Connect API integration. It guides users through initial triage (checking status, error rates), outlines immediate mitigation strategies for common API errors (401, 429, 5xx), and covers standardized communication templates and detailed post-incident procedures, including log collection and root cause analysis.

A comprehensive runbook for responding to critical incidents involving Flexport API integrations. It covers various failure scenarios, including complete API outages, webhook delivery loss, and complex supply chain data synchronization issues. The guide provides severity classification (P1-P4), diagnostic commands, and step-by-step playbooks for rapid triage and mitigation.

A comprehensive runbook for managing HubSpot CRM integration failures. It guides users through rapid triage, diagnosing common API errors (401, 429, 5xx), implementing immediate mitigation steps, and completing structured post-incident reviews. Essential for maintaining system uptime during outages.

A comprehensive guide for rapid incident response and troubleshooting of Miro API v2 integration failures. It covers defining severity levels, quick triage steps, detailed error handling for 4xx/5xx status codes (e.g., token expiration, rate limiting), mitigation strategies, and postmortem evidence collection.

A comprehensive guide for rapid incident response for Palantir Foundry systems. This runbook provides structured steps for triage, severity classification (P1-P4), and detailed playbooks for common issues like authentication failures, rate limiting, and build pipeline errors. It guides users through investigation, mitigation, and postmortem documentation to minimize downtime and ensure quick recovery.

A comprehensive operational guide for managing Salesforce integration failures and outages. This runbook provides step-by-step procedures for initial triage, diagnosing common API errors (e.g., rate limiting, authentication failures), implementing mitigation strategies, and conducting detailed post-incident reviews (postmortems). It covers best practices for ensuring system reliability during critical system outages.