Create, search, update, and manage SOC cases via the Kibana Cases API. Use when tracking incidents, linking alerts to cases, adding investigation notes, or managing triage output.
Install
npx skills add elastic/agent-skills --skill security-case-managementnpx skills add elastic/agent-skills --skill security-case-management -a claude-code -gnpx skills add elastic/agent-skills --skill security-case-management -a codex -ggemini skills install https://github.com/elastic/agent-skills.git --path skills/security/case-managementgh skill install elastic/agent-skills security-case-managementgit clone --depth 1 https://github.com/elastic/agent-skills /tmp/elastic__agent-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/elastic__agent-skills/skills/security/case-management ~/.claude/skills/security-case-management # Claude Code
cp -R /tmp/elastic__agent-skills/skills/security/case-management ~/.agents/skills/security-case-management # Codex, Cursor, Gemini CLI, Copilot, OpenCode