Can this skill help with legal evidence preservation?

Yes, the skill provides specific guidance on collecting database logs, network traffic, and application logs in a manner that supports forensic investigation.

How does Claude help during a ransomware attack?

Claude identifies the incident type and generates a step-by-step playbook for isolating systems, removing the threat, and initiating secure data recovery.

Is this skill only for active security incidents?

No, it is equally effective for proactive security planning, allowing teams to draft incident response plans and run simulation scenarios.

What incident types are supported?

The skill handles a wide range of incidents including data breaches, ransomware, DDoS attacks, unauthorized access, and malware infections.

Does it provide remediation steps after an attack?

Yes, it develops detailed remediation plans to patch vulnerabilities exploited during an incident and restore systems to a known-secure state.

Security Incident Responder

Name: Security Incident Responder
Author: jeremylongshore

byjeremylongshore

•

883

•

セキュリティとテスト

Guides developers and security teams through the end-to-end incident response lifecycle, from containment and forensics to post-incident remediation.

The Security Incident Responder skill transforms Claude into a digital first responder capable of managing complex security breaches and system attacks. It provides structured guidance for classifying threats such as ransomware, DDoS, or data breaches, and generates tailored containment, eradication, and recovery playbooks. By assisting with forensic evidence collection, timeline construction, and remediation planning, this skill ensures that teams follow industry best practices to minimize damage and prevent future occurrences.

主な機能

01Post-incident reporting and lessons learned documentation

02883 GitHub stars

03Tailored response playbook generation for specific attack vectors

04Step-by-step guidance for forensic evidence and log collection

05Automated incident classification and severity assessment

06Detailed remediation planning and vulnerability mitigation

ユースケース

01Managing a live ransomware attack with structured containment and recovery steps

02Investigating suspected unauthorized access or data breaches in production databases

03Developing and documenting proactive incident response plans and organizational playbooks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills skill-adapter

For use in Claude.ai and ChatGPT

Download Skill