asp-case-en

Review, list, and update ASP cases with filters and AI analysis fields.

1.1k|201|Updated Sep 7, 2025
One-click install
npx skills add https://github.com/FunnyWolf/agentic-soc-platform --skill asp-case-en
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: asp-case-en
Source: https://github.com/FunnyWolf/agentic-soc-platform/tree/main/PLUGINS/ClaudeCode/skills/asp-case-en
Command: npx skills add https://github.com/FunnyWolf/agentic-soc-platform --skill asp-case-en

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manage ASP security cases efficiently by enabling review, listing, and updates across case workflows and AI analysis fields.

Core Features & Use Cases

  • Review a specific case and surface its context for quick triage.
  • List cases with filters to track status, severity, and progress.
  • Inspect case discussions and check related alerts or playbook runs to inform decisions.
  • Update case workflow fields and AI analysis results to drive automation and collaboration.

Quick Start

Review a case by giving the case_id, for example: review case 12345.

Frequently Asked Questions about asp-case-en

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review and triage security cases in a SOC environment?▼

To triage security cases, you can review a specific case by providing its case_id to surface context, inspect discussions, and view related alerts or playbook runs for quick decision-making.

What is the best way to list and filter active security cases?▼

Listing active security cases is done using filters to track case status, severity, and progress, helping SOC operators manage and monitor ongoing investigations effectively.

Can I update case workflow and AI analysis fields directly?▼

Yes, you can update case workflow fields and AI analysis results directly to drive automation and collaboration across your security investigation processes.

Do I need an MCP ASP server connection to manage security cases?▼

Yes, an MCP ASP server connection is required to manage security cases, as the system uses frontmatter-defined metadata for discovery and enforces structured, rule-based guidance for case operations.

How do I inspect playbook runs and alerts related to a specific case?▼

You inspect related playbook runs and alerts by reviewing the specific case, which surfaces all associated context and related security events to support your triage process.