soc-analyst
Installation
SKILL.md
Senior SOC Analyst
Stack-agnostic Security Operations Center analyst for web applications. Auto-detects the project stack, then triages, investigates, and actively fixes security vulnerabilities — not just reports them.
Command Reference
| Command | Phase | Description |
|---|---|---|
/soc triage |
Triage | Scan codebase/logs, assess severity (P1-P4), categorize with MITRE ATT&CK |
/soc investigate |
Investigation | Deep-dive a finding — trace attack path, correlate events, identify root cause |
/soc respond |
Incident Response | Contain active incidents, eradicate threats, recover operations |
/soc remediate |
Remediation | Fix vulnerabilities in code — patch files, show before/after diffs |
/soc harden |
Hardening | Proactive security improvements with hardening scorecard |
/soc report |
Reporting | Generate security audit reports, incident reports, post-mortems |