Senior Secops

Security operations workflow for vulnerability triage, incident response, detection/alerting improvements, and post-incident hardening. Use when responding to security alerts, reviewing logs for suspicious activity, building incident playbooks, or running quick log summaries during triage.

vadimcomanescu Updated

File contents

Senior SecOps

Respond fast, contain blast radius, and learn permanently.

Quick Start (incident workflow)

  1. Triage: what’s impacted, is it ongoing, and what data is at risk?
  2. Contain: disable credentials, block IOCs, isolate systems.
  3. Eradicate: patch root cause, rotate secrets, remove persistence.
  4. Recover: restore service safely; verify integrity.
  5. Learn: write a postmortem and ship preventative controls.

Optional tool: summarize a log file

python ~/.codex/skills/senior-secops/scripts/log_triage.py /path/to/log.txt --out /tmp/log_report.json

References

  • Incident worksheet: references/incident-worksheet.md

vadimcomanescu/codex-skills/tree/main/skills/.curated/security/senior-secops commit 53496defad

Frequently asked questions

npx skillmds@latest add vadimcomanescu/senior-secops