claude

incident-response

Use when a security incident is suspected or confirmed and you need a disciplined response on authorized systems.

0 on GitHubby Muhammad Izaz Haiderv1.0.0MITupdated 16 days agoincident
/

Plugin incident-response from marketplace agent-arsenal in mizazhaider-ceh/AgentArsenal. Commands read from the repo's manifest — 12 days ago.

What it installs

Skills (5)

  • incident-response

    Use when a security incident is suspected or confirmed and you need a disciplined response on authorized systems. Covers the NIST 800-61 lifecycle: preparation, detection and analysis, containment, eradication, recovery, and lessons learned. Includes Linux and Windows triage commands (processes, net

  • ir-containment

    Use when an incident's scope is known and attacker activity

  • ir-eradication

    Use when the attacker is contained and their presence must be

  • ir-lessons-learned

    Use after an incident closes to extract improvements from

  • ir-scoping

    Use when an incident is declared and you need to define what

View source on GitHub

More from mizazhaider-ceh/AgentArsenal

All 353 plugins →

web-sqli

claude

Use when testing a web application for SQL injection on an authorized engagement.

7 skills

0

Use when planning or running nmap scans during authorized engagements: host discovery options, TCP SYN, connect, UDP, NULL, FIN, Xmas, and ACK scan types, service and OS detection, timing templates T0 to T5, evasion techniques (fragmentation, decoys, idle scans, source port tricks, data length padding), NSE script selection by category, and output formats for evidence.

6 skills

0

Use when you hold a low-privilege Linux shell on an authorized engagement, lab, or CTF and need a reliable path to root.

6 skills

0

web-xss

claude

Use when testing a web application for cross-site scripting on an authorized engagement.

6 skills

0

Use when mapping an authorized Active Directory environment during an internal assessment or assumed breach exercise.

5 skills

0

Use when testing REST, GraphQL, or internal APIs on an authorized engagement.

5 skills

0

Similar plugins

Install the "AAS Observability & Incident Response" editorial skill bundle for Claude Code.

12 skills

sickn33/agentic-awesome-skills 49,620

Investigate incidents, review code and execute UAT for release readiness, scan code for vulnerabilities, and run penetration tests with AWS DevOps Agent and AWS Security Agent.

13 skills · 9 commands · 1 MCP server

anthropics/claude-plugins-official 47,076

Production incident management, triage workflows, and automated incident resolution

4 skills · 2 commands · 6 agents

wshobson/agents 42,461

818 cybersecurity skills covering web security, pentesting, DFIR, threat intelligence, cloud security, malware analysis, and more. Mapped to 6 frameworks.

200 skills

mukul975/Anthropic-Cybersecurity-Skills 36,021

Streamline engineering workflows — standups, code review, architecture decisions, incident response, and technical documentation. Works with your existing tools or standalone.

10 skills · 10 MCP servers

anthropics/knowledge-work-plugins 35,601

32 engineering skills: architecture, frontend, backend, fullstack, QA, DevOps, security, AI/ML, data engineering, Playwright (9 sub-skills), self-improving agent, Stripe integration, TDD guide, tech stack evaluator, Google Workspace CLI, a11y audit (WCAG 2.2), Azure cloud architect, GCP cloud architect, security pen testing, Snowflake development, adversarial-reviewer, ai-security, cloud-security, incident-response, red-team, threat-detection. v2.8.1 audits senior-fullstack / senior-frontend / senior-backend against karpathy-coder + Matt Pocock — each ships a 7-question forcing-question library, 4 customization profiles (JSON), deterministic decision engine, composition map into POWERFUL specialists, plus cs-fullstack-engineer / cs-frontend-engineer / cs-backend-engineer orchestrator agents (context: fork) + /cs-fullstack-review, /cs-frontend-review, /cs-backend-review, /cs-engineer-grill slash commands.

35 skills · hooks

alirezarezvani/claude-skills 29,725

Maintain incident-response?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins353 plugins