Triage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge. Use when triaging alerts, performing SOC analysis, or investigating detections.
Install
npx skills add elastic/agent-skills --skill security-alert-triagenpx skills add elastic/agent-skills --skill security-alert-triage -a claude-code -gnpx skills add elastic/agent-skills --skill security-alert-triage -a codex -ggemini skills install https://github.com/elastic/agent-skills.git --path skills/security/alert-triagegh skill install elastic/agent-skills security-alert-triagegit clone --depth 1 https://github.com/elastic/agent-skills /tmp/elastic__agent-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/elastic__agent-skills/skills/security/alert-triage ~/.claude/skills/security-alert-triage # Claude Code
cp -R /tmp/elastic__agent-skills/skills/security/alert-triage ~/.agents/skills/security-alert-triage # Codex, Cursor, Gemini CLI, Copilot, OpenCode