claude

security-incident-response

IR planning, forensic analysis, containment, evidence preservation, postmortems.

48 on GitHubby Seth Fordv1.0.0MITupdated 8 months agosecurity
/

Plugin security-incident-response from marketplace claude-skills in sethdford/claude-skills. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (8)

  • containment-strategy

    Develop containment strategies to isolate compromised systems, prevent lateral movement, and stop ongoing attacks.

  • evidence-preservation

    Preserve evidence during incident response to enable forensic analysis and maintain legal admissibility.

  • forensic-analysis-guide

    Conduct forensic analysis to determine attack vectors, scope of compromise, and evidence for legal proceedings.

  • incident-communication

    Develop incident communication strategies for internal teams, customers, regulators, and media during and after security incidents.

  • incident-response-plan

    Develop comprehensive incident response plans with clear roles, procedures, communication protocols, and recovery workflows. Use when establishing IR processes, conducting tabletops, or updating response procedures after incidents.

  • lessons-learned

    Conduct post-incident reviews to document lessons learned and implement process improvements preventing recurrence.

  • recovery-procedures

    Establish recovery procedures to restore systems, verify integrity, and validate business continuity after incidents.

  • root-cause-analysis-security

    Conduct root-cause analysis (RCA) to identify underlying causes of security incidents and prevent recurrence.

Slash commands (3)

  • /security-incident-response:investigate-breach

    Conduct forensic investigation of suspected breaches including evidence collection and timeline reconstruction.

  • /security-incident-response:respond-to-incident

    Execute incident response procedures including assessment, containment, communication, and recovery.

  • /security-incident-response:write-postmortem

    Conduct post-incident review and document findings, root causes, and preventive measures.

View source on GitHub

More from sethdford/claude-skills

All 57 plugins →

Cross-functional SDLC workflows: phase gates, definitions of ready/done, feature lifecycle, release checklists, incident-to-improvement, compliance traceability. Grounded in ISO/IEC 12207, 15288.

8 skills · 8 commands

48

Architecture patterns, system decomposition, DDD, microservices, event-driven, CQRS. Grounded in TOGAF, IASA BTABoK, ISO 42010.

10 skills · 4 commands

48

User research: personas, empathy maps, journey maps, interviews, usability testing, JTBD.

10 skills · 4 commands

48

Clean code, refactoring, SOLID principles, code smell detection, complexity analysis.

10 skills · 4 commands

48

Problem discovery, customer research, opportunity assessment, assumption mapping.

10 skills · 4 commands

48

UI design: color systems, typography, layout grids, responsive design, data viz.

9 skills · 4 commands

48

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

Install the "AAS Secure App Builder" workflow plugin from Agentic Awesome Skills.

12 skills

sickn33/agentic-awesome-skills 49,620

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain security-incident-response?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins57 plugins