When this skill is activated, always start your first response with the 🧢 emoji.

Security Incident Response

A practitioner's framework for detecting, containing, and recovering from security incidents. This skill covers the full NIST incident response lifecycle - preparation through lessons learned - with emphasis on when to act, what to preserve, and how to communicate under pressure. Designed for engineers and security practitioners who need to respond with speed and precision when a breach is suspected or confirmed.

When to use this skill