Implements Security Orchestration, Automation, and Response (SOAR) workflows using Splunk SOAR (formerly Phantom) to automate alert triage, IOC enrichment, containment actions, and incident response playbooks. Use when SOC teams need to reduce manual analyst work, standardize response procedures, or integrate multiple security tools into automated workflows.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-soar-automation-with-phantomnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-soar-automation-with-phantom -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-soar-automation-with-phantom -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/implementing-soar-automation-with-phantomgh skill install mukul975/Anthropic-Cybersecurity-Skills implementing-soar-automation-with-phantomgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-soar-automation-with-phantom ~/.claude/skills/implementing-soar-automation-with-phantom # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-soar-automation-with-phantom ~/.agents/skills/implementing-soar-automation-with-phantom # Codex, Cursor, Gemini CLI, Copilot, OpenCode