vantage-incident-triage

What problem does it solve?

This Skill streamlines the initial response to security incidents by creating structured records, classifying incidents, and generating immediate action plans, preventing critical startup steps from being missed or handled inconsistently.

Core Features & Use Cases

• Incident Record Creation: Establishes a durable, tenant-scoped record for each incident.
• Automated Triage: Classifies incident type, severity, and ownership, then generates immediate actions, evidence collection steps, and communication plans.
• Runbook Integration: Launches or recommends linked runbook packs for guided incident response.
• Use Case: When a ransomware alert is triggered, this Skill can automatically create an incident record, assign an owner, define immediate containment actions, and suggest the ransomware runbook.

Quick Start

Start a new incident triage workflow for a ransomware scenario.