Which ticketing platforms are supported by this skill?

The skill provides implementation patterns and code samples for ServiceNow ITSM, Jira Service Management, and TheHive.

How does the skill manage Service Level Agreements (SLAs)?

It includes logic for mapping incident severity to specific response and resolution windows, along with Splunk queries to monitor for potential SLA breaches.

Is the integration customizable for different SIEMs?

Yes, the skill uses a generalized REST API approach that can be adapted for Splunk ES, Microsoft Sentinel, or other SOAR/SIEM connectors.

Does this skill handle initial alert triage?

No, this skill is specifically designed for confirmed incidents requiring structured investigation and remediation, rather than triaging every individual SIEM alert.

Can it automate ticket escalations?

Yes, it provides logic to automatically update assignment groups and urgency levels based on defined triggers or time-based SLA thresholds.

Security Incident Ticketing System

Name: Security Incident Ticketing System
Author: mukul975

bymukul975

•

4,121

•

Seguridad y Pruebas

Automates the creation and management of security incident tickets in platforms like ServiceNow, Jira, and TheHive by integrating with SIEM alerts.

This skill enables SOC teams to formalize their incident response workflows by bridging the gap between SIEM detections and enterprise ticketing platforms. It provides structured frameworks for incident taxonomy, severity classification, and automated lifecycle management including creation, assignment routing, and resolution tracking. By standardizing compliance documentation and escalation paths, it ensures that confirmed security events are managed with full auditability and strictly followed SLAs, reducing manual overhead during critical investigations.

Características Principales

01Real-time SLA tracking and automated escalation logic

024,121 GitHub stars

03Automated ticket creation triggered by SIEM alerts via REST APIs

04Comprehensive audit trails for compliance and post-incident reviews

05Standardized incident taxonomy and severity mapping frameworks

06Multi-platform support for ServiceNow, Jira, and TheHive

Casos de Uso

01Formalizing SOC workflows for confirmed security incidents

02Meeting compliance requirements for documented incident lifecycles

03Coordinating multi-team response via automated escalation paths

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills implementing-ticketing-system-for-incidents

For use in Claude.ai and ChatGPT

Características Principales

01Real-time SLA tracking and automated escalation logic

024,121 GitHub stars

03Automated ticket creation triggered by SIEM alerts via REST APIs

04Comprehensive audit trails for compliance and post-incident reviews

05Standardized incident taxonomy and severity mapping frameworks

06Multi-platform support for ServiceNow, Jira, and TheHive

Casos de Uso

01Formalizing SOC workflows for confirmed security incidents

02Meeting compliance requirements for documented incident lifecycles

03Coordinating multi-team response via automated escalation paths

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills implementing-ticketing-system-for-incidents

For use in Claude.ai and ChatGPT