“Incident response”

Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment, cloud-native log analysis, resource…

Builds real-time incident response dashboards in Splunk, Elastic, or Grafana to provide SOC analysts and leadership with situational awareness during active…

线上事故响应与复盘流程，覆盖止血、分级、指挥、沟通、根因分析、行动项追踪，降低 MTTR 与重复事故率。

安全应急响应多Agent协作工作流。当用户遇到安全事件、系统被攻击、数据泄露、服务异常等安全相关场景时激活。支持从事件发现到复盘总结的完整应急响应流程，自动协调安全分析师、漏洞修复、通知沟通、取证调查等多个Agent并行/串行协作。

Respond to security incidents in AWS, Azure, and GCP via identity-based containment, cloud-native log analysis (CloudTrail, Azure Activity Logs, GCP Audit…

Diagnose a Docker container or compose stack that's failing, looping, or unresponsive

Respond to phishing incidents by analyzing reported emails, extracting indicators, sandboxing URLs/attachments, assessing credential compromise, quarantining…

Incident severity classification, runbook templates, root cause analysis, and post-incident review

Respond to malware infections across enterprise endpoints by identifying the malware family, determining infection vectors, assessing spread, and executing…

安全事件响应助手 - 专业的安全事件处置与应急响应专家。适用场景： (1) 安全事件识别与分类 (2) 应急响应计划制定 (3) 事件调查与取证分析 (4) 遏制与根除方案设计 (5) 系统恢复与业务连续性 (6) 事件复盘与改进建议 (7) 安全事件报告撰写…

Diagnose Airflow failures from UI links with bounded logs and optional recovery actions.

Production incident response automation.

Use when coordinating a production incident, building incident response processes, or running post-mortems.

Production incident response - from detection through resolution to post-mortem.

Data breach incident response with ENISA severity scoring, notification timelines, and compliance tracking.

Production incident response.

Incident response, postmortem facilitation, root cause analysis (RCA), blameless culture, incident timeline documentation, and incident classification.

Set up alerting rules, configure on-call rotations, and manage incident response workflows.

Blue team incident response skill.

Incident response pipeline for GitLab repositories using Copilot CLI, Jira, and troubleshooter.

Elite incident response and legal compliance guidance for data breaches under GDPR Articles 33 & 34.

Reads your incident-response runbook and says which of the three Article 23 clocks it gets wrong

Compose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations.

Expert DevOps troubleshooter specializing in rapid incident response, advanced debugging, and modern observability.