suspicious-login-investigation
Investigate unusual authentication activity using source IP, account, time, geolocation, MFA, and privilege context. Recommend validation steps and avoid changing ticket status.
Source facts
- Repository
- Sec-Link/Argus-Agentic-SOC-Platform
- Last source activity
- September 1, 2026 at 03:35
- Detected SKILL.md language
- English
- Stars
- 673
- Forks
- 70
Install options
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Review the source files
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
