Linux Threat Mitigation and Incident Remediation (Hardened Edition)

This skill provides a structured, forensically-aware framework for analyzing and securing a Linux host during or after a security event.

It emphasizes:

• Non-destructive evidence collection
• Accurate threat detection
• Firewall-aware containment
• Integrity verification
• Controlled, reversible remediation
• Distribution-aware command usage

Environment Context

Supported Systems