Packs

4 packs

Results for “pr-triage”

8 skills
More results
mukul975
analyzing-indicators-of-compromise
Triages and enriches indicators of compromise (IPs, domains, file hashes, URLs, email artifacts) from phishing emails, security alerts, or threat feeds, assigning confidence scores and dispositions using VirusTotal, AbuseIPDB, MalwareBazaar, and MISP.
24.6k · bundle
mukul975
triaging-windows-with-kape
Collect and parse forensic artifacts from Windows systems using KAPE for rapid DFIR triage.
24.6k · bundle
mukul975
triaging-security-incident
Triages security incidents by classifying type, assigning severity based on business impact, enriching with threat intelligence, and routing to appropriate response teams using NIST SP 800-61r3 and SANS PICERL frameworks.
24.6k · bundle
mukul975
triaging-security-alerts-in-splunk
Triages security alerts in Splunk Enterprise Security by classifying severity, investigating notable events, correlating related telemetry, and making escalation or closure decisions using SPL queries and the Incident Review dashboard.
24.6k · bundle
mukul975
building-phishing-reporting-button-workflow
Deploy a phishing report button in email clients and build an automated triage workflow that analyzes user-reported suspicious emails, extracts IOCs, and provides feedback to reporters.
24.6k · bundle
mukul975
implementing-soar-automation-with-phantom
Automates alert triage, IOC enrichment, containment actions, and incident response playbooks using Splunk SOAR (Phantom) to reduce manual analyst work and standardize response procedures.
24.6k · bundle