abnormal-security

Plugin abnormal-security from marketplace msp-claude-plugins in WYRE-AI/msp-claude-plugins. Commands read from the repo's manifest — yesterday.

Skills (4)

• Abnormal Security API Patterns

  Abnormal Security REST API fundamentals: Bearer token authentication, base URLs, rate limiting, pagination, OData filtering, request/response formats, and error handling. When authenticating to or calling the Abnormal Security REST API. Use when: abnormal api, abnormal authentication, abnormal rest

• Abnormal Security Cases

  Abnormal Security abuse mailbox cases: user-reported email submissions, case statuses and judgments, the case lifecycle, bulk and remediation actions, and phishing simulation handling. When triaging or remediating user-reported suspicious emails in the Abnormal Security abuse mailbox. Use when: abno

• Abnormal Security Messages

  Abnormal Security message analysis: message retrieval, email header inspection, attachments, sender reputation, delivery context, and SPF/DKIM/DMARC authentication results. When performing deep analysis or forensics on an individual email message in Abnormal Security. Use when: abnormal message, mes

• Abnormal Security Threats

  Abnormal Security threat detection: threat types (BEC, phishing, malware, socially-engineered attacks, spam, graymail, credential theft), attack vectors, severity assessment, remediation actions, and investigation workflows. When investigating an email-borne threat detected by Abnormal Security's be

Slash commands (3)

• /abnormal-security:case-review

  Review and triage abuse mailbox cases in Abnormal Security

• /abnormal-security:search-threats

  Search for specific threat patterns in Abnormal Security by sender, recipient, attack type, or keywords

• /abnormal-security:threat-triage

  Triage recent email threats detected by Abnormal Security by severity and attack type

Subagents (2)

• email-threat-analyst

  Use this agent when investigating email threats detected by Abnormal Security, analyzing attack chains, assessing user exposure, or managing per-message remediation across client tenants. Trigger for: abnormal threat investigation, BEC attack, business email compromise, phishing case, abnormal remed

• threat-report-generator

  Use this agent when generating periodic threat landscape reports from Abnormal Security data across the MSP client portfolio — not for live threat investigation, but for summarizing attack trends, most targeted organizations, most common attack types, BEC attempt volumes, and remediation effectivene

Similar plugins