TopRank Skills

Home / Claw Skills / Others / cyber-ir-playbook
Official OpenClaw rules 15%

cyber-ir-playbook

Build incident response timelines and report packs from event logs. Use for detection-to-recovery reporting, phase tracking, and stakeholder-ready incident summaries.

Stars

0

Installs

0

Status

ACTIVE

Visibility

PUBLIC

安装方式

直接复制以下提示词,发送给你的 AI 助手即可完成安装。

请先检查是否已安装 SkillHub 商店,若未安装,请根据 https://skillhub-1388575217.cos.ap-guangzhou.myqcloud.com/install/skillhub.md 安装 SkillHub 商店,然后安装 cyber-ir-playbook 技能。 若已安装,则直接安装 cyber-ir-playbook 技能。

Overview

Skill Key
0x-professor/cyber-ir-playbook
Author
0x-professor
Source Repo
openclaw/skills
Version
-
Source Path
skills/0x-professor/cyber-ir-playbook
Latest Commit SHA
7c2a8d6b18e5fe00a1ac17912bd03530344316a0

Extracted Content

SKILL.md excerpt

# Cyber IR Playbook

## Overview

Convert incident events into a standardized response timeline and phase-based report.

## Workflow

1. Ingest incident events with timestamps.
2. Classify events into detection, containment, eradication, recovery, or post-incident phases.
3. Build ordered timeline and summarize current phase completion.
4. Produce a report artifact for internal and executive audiences.

## Use Bundled Resources

- Run `scripts/ir_timeline_report.py` to generate a deterministic timeline report.
- Read `references/ir-phase-guide.md` for phase mapping guidance.

## Guardrails

- Focus on defensive incident handling and post-incident learning.
- Do not provide offensive exploitation instructions.

Related Claw Skills