Alert Triage Playbook

Frameworks: MITRE ATT&CK v16, NIST SP 800-61 Rev 2 Role: SOC Analyst Time: 10-20 min per alert Output: Alert disposition (TP/BTP/FP), priority assignment (P1-P4), escalation decision

1. When to Use

If a target is provided via arguments, focus the review on: $ARGUMENTS

Invoke this skill when any of the following conditions are met: