Security Log Analysis

Frameworks: MITRE ATT&CK v16, NIST SP 800-92 (Guide to Computer Security Log Management) Role: SOC Analyst, Security Engineer Time: 20-40 min per analysis Output: Log analysis findings, anomaly identification, baseline recommendations, ATT&CK-mapped observations

1. When to Use

If a target is provided via arguments, focus the review on: $ARGUMENTS

Invoke this skill when any of the following conditions are met: