Run any Skill in Manus with one click

security-case-management

Stars405

Forks10

UpdatedApril 19, 2026 at 16:18

Create, search, update, and manage SOC cases via the Kibana Cases API. Use when tracking incidents, linking alerts to cases, adding investigation notes, or managing triage output.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

aspectrr

aspectrr/deer

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Information Security AnalystsComputer and Mathematical Occupations·SOC 15-1212

SKILL.md

readonly

More from this repository

same repository

elasticsearch-audit

aspectrr/deer

Enable, configure, and query Elasticsearch security audit logs. Use when the task involves audit logging setup, event filtering, or investigating security incidents like failed logins.

2026-04-19405

elasticsearch-authn

aspectrr/deer

Authenticate to Elasticsearch using native, file-based, LDAP/AD, SAML, OIDC, Kerberos, JWT, or certificate realms. Use when connecting with credentials, choosing a realm, or managing API keys.

2026-04-19405

elasticsearch-authz

aspectrr/deer

Manage Elasticsearch RBAC: native users, roles, role mappings, document- and field-level security. Use when creating users or roles, assigning privileges, or mapping external realms like LDAP/SAML.

2026-04-19405

elasticsearch-esql

aspectrr/deer

Execute ES|QL (Elasticsearch Query Language) queries, use when the user wants to query Elasticsearch data, analyze logs, aggregate metrics, explore data, or create charts and dashboards from ES|QL results.

2026-04-19405

elasticsearch-file-ingest

aspectrr/deer

Ingest and transform data files (CSV/JSON/Parquet/Arrow IPC) into Elasticsearch with stream processing and custom transforms. Use when loading files or batch importing data.

2026-04-19405

elasticsearch-security-troubleshooting

aspectrr/deer

Diagnose and resolve Elasticsearch security errors: 401/403 failures, TLS problems, expired API keys, role mapping mismatches, and Kibana login issues. Use when the user reports a security error.

2026-04-19405

name	security-case-management
description	Create, search, update, and manage SOC cases via the Kibana Cases API. Use when tracking incidents, linking alerts to cases, adding investigation notes, or managing triage output.
metadata	{"author":"elastic","version":"0.1.0","source":"elastic/agent-skills//skills/security/case-management"}

Tag pattern	Example	Purpose
`classification:<value>`	`classification:malicious`	Triage classification
`confidence:<score>`	`confidence:85`	Confidence score 0-100
`mitre:<technique>`	`mitre:T1574.002`	MITRE ATT&CK technique
`agent_id:<id>`	`agent_id:550888e5-...`	Agent ID for correlation

Classification	Kibana severity
benign (score 0-19)	`low`
unknown (score 20-60)	`medium`
malicious (score 61-80)	`high`
malicious (score 81-100)	`critical`

name	security-case-management
description	Create, search, update, and manage SOC cases via the Kibana Cases API. Use when tracking incidents, linking alerts to cases, adding investigation notes, or managing triage output.
metadata	{"author":"elastic","version":"0.1.0","source":"elastic/agent-skills//skills/security/case-management"}

Tag pattern	Example	Purpose
`classification:<value>`	`classification:malicious`	Triage classification
`confidence:<score>`	`confidence:85`	Confidence score 0-100
`mitre:<technique>`	`mitre:T1574.002`	MITRE ATT&CK technique
`agent_id:<id>`	`agent_id:550888e5-...`	Agent ID for correlation

security-case-management

Case Management

Prerequisites

Quick start

Tag conventions

Case severity mapping

Guidelines

Case Management

Prerequisites

Quick start

Tag conventions

Case severity mapping

Guidelines