containment-advisor

What problem does it solve?

This Skill provides expert recommendations for containing active security threats, ensuring minimal disruption to production systems.

Core Features & Use Cases

• Threat Containment Strategy: Recommends precise containment actions for 10 threat types (e.g., ransomware, credential exposure).
• Impact Assessment: Evaluates blast radius, production impact, and reversibility before recommending action.
• Use Case: When ransomware is detected spreading, this Skill will recommend isolating affected segments and disabling service accounts, while clearly stating the potential impact on critical services.

Quick Start

Recommend containment for a ransomware event affecting file-server-01 and file-server-02.