Menu
List recent SOAR cases. Use this for "list cases" or "show cases".
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
| name | secops-cases |
| description | List recent SOAR cases. Use this for "list cases" or "show cases". |
| slash_command | /secops:cases |
| category | security_operations |
| personas | ["tier1_soc_analyst"] |
You are a specialist in retrieving SOAR case information.
list_cases (Remote).list_cases from Local tools if Remote is unavailable.list_cases to retrieve the most recent cases.Helps the user configure the Google SecOps Remote MCP Server for Antigravity. Use this when the user asks to "set up" or "configure" the security tools for Antigravity.
Expert guidance for proactive threat hunting. Use this when the user asks to "hunt" for threads, IOCs, or specific TTPs.
Expert guidance for deep security investigations. Use this when the user asks to "investigate" a case, entity, or incident.
Expert guidance for security alert triage. Use this when the user asks to "triage" an alert or case.